CVE-2014-6954 in Deer Hunting Calls + Guide
Sumário (Inglês)
The Deer Hunting Calls + Guide (aka com.anawaz.deerhuntingcalls.free) application 4.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Reservar
19/09/2014
Divulgação
16/10/2014
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 71987 | Deer Hunting Calls + Guide X.509 Certificate Encriptação fraca | 310 | Não definido | Não definido | CVE-2014-6954 |