4.3

CVE-2012-5456

The Zoner AntiVirus Free application for Android does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, as demonstrated by a server used for updating virus signature files.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zoner ≫ Zoner Antivirus Free Version- Update- SwPlatformandroid
Zoner ≫ Zoner Antivirus Free Version1.7.0 Update- SwPlatformandroid
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.99% 0.579
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/56292
Third Party Advisory
VDB Entry
http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/79591
Third Party Advisory
VDB Entry