medium4.0
CVE-2014-5239
The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle a…
Impact
The Microsoft Outlook.com application before 7.8.2.12.49.7090 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Outlook.Com | through 7.8.2.12.49.6434 Versions 7.8.2.10.47.7365, 7.8.2.11.48.4848, 7.8.2.12.49.0430, 7.8.2.12.49.5701 |