Skip to content

CVE-2017-2105 The TVer App for Android 3.2.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

MediumCVSS 5.9 EPSS 0.67%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The TVer App for Android 3.2.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected products

ProductAffected versionsFixed in
presentcast inc tver <= 3.2.7 No fix listed
PRESENTCAST INC. TVer App for Android = ver3.2.7 and earlier No fix listed

References

  • JVN#53880182 patch third-party-advisory vdb-entry
  • 96232 third-party-advisory vdb-entry