Lucene search
PRIOn knowledge basePRION:CVE-2012-5456HistoryOct 24, 2012 - 5:55 p.m.
Design/Logic Flaw
2012-10-2417:55:00
PRIOn knowledge base
www.prio-n.com
4
The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject’s Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a server used for updating virus signature files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zoner_antivirus_free | eq | 1.7.0 |
Related
cve
cve
CVE-2012-5456
2012-10-24 17:55:02
nvd
nvd
CVE-2012-5456
2012-10-24 17:55:02
cvelist
cvelist
CVE-2012-5456
2012-10-24 10:00:00