CVE-2014-5654 in Kaspersky Internet Security
Zusammenfassung (Englisch)
The Kaspersky Internet Security (aka com.kms.free) application 11.4.4.232 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Reservieren
30.08.2014
Veröffentlichung
08.09.2014
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 67461 | Kaspersky Internet Security com.kms.free schwache Verschlüsselung | 310 | Unbewiesen | Unavailable | CVE-2014-5654 |