Filtered by vendor Microsoft Subscriptions
Filtered by product Windows Phone 7 Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2012-2993 1 Microsoft 2 Windows Phone 7, Windows Phone 7 Firmware 2024-11-21 5.9 Medium
Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1) POP3, (2) IMAP, or (3) SMTP protocol via an arbitrary valid certificate.