Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.4
CVE-2014-7461: A King Sperm app can be tricked to reveal data
CVE-2014-7461 · published 12 years ago
Summary
The A King Sperm by Dr. Seema Rao Android app does not properly check the security certificates used for encrypted connections. This means a person who intercepts the network traffic could pretend to be a legitimate server and capture information the app sends. Update the app or contact the developer to ensure proper certificate validation is added.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| teknopoint | a_king_sperm_by_dr._seema_rao |
0.63.13384.23020 cpe:2.3:a:teknopoint:a_king_sperm_by_dr._seema_rao:0.63.13384.23020:*:*:*:*:android:*:* |
Original advisory text
The A King Sperm by Dr. Seema Rao (aka com.wKingSperm) application 0.63.13384.23020 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoo...
The A King Sperm by Dr. Seema Rao (aka com.wKingSperm) application 0.63.13384.23020 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
References
- http://www.kb.cert.org/vuls/id/582497 US Government Resource
- http://www.kb.cert.org/vuls/id/896657 US Government Resource
- https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF...
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
5.4
Medium
Type
CWE-310Cryptographic Issues
Timeline
Published19 Oct 2014
Updated2 Nov 2026
First seen29 Sep 2026
Sources
CVE-2014-7461 · NVD
Track software like this
Free during beta