X.509 Certificate Verification Flaw in Funny Photo Color Editor for Android
CVE-2014-7013

Currently unrated

Key Information:

Vendor: Funny Photo Color Editor Project
Status: Funny Photo Color Editor
Vendor: CVE Published:; 16 October 2014

🔔 Create Funny Photo Color Editor Project Vulnerability Alert

What is CVE-2014-7013?

The Funny Photo Color Editor application for Android fails to properly validate X.509 certificates from SSL servers. This oversight allows attackers to exploit the application by conducting man-in-the-middle attacks, during which they can present crafted certificates to impersonate legitimate servers. Consequently, users may unknowingly provide sensitive information to malicious actors, significantly compromising their security and privacy.

References

http://www.kb.cert.org/vuls/id/132113

third-party-advisoryx_refsource_CERT-VN

http://www.kb.cert.org/vuls/id/582497

third-party-advisoryx_refsource_CERT-VN

https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJ...

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 16, 2014
Vulnerability Reserved
Sep 19, 2014

CVE-2014-7013 Data

JSON