CVE-2014-7700: The Flying Fox (aka com.chillingo.slyfoxfree.android.aja) application 1.0.0 for Android does not verify X.5...

Security readout for executives and security teams

This CVE describes an Android app that failed to properly check server certificates. If a user ran the affected app on a network controlled or observed by an attacker, the attacker could impersonate the app’s server and potentially capture sensitive information. Exposure is likely limited to environments where the named Android app version is still installed or archived on managed devices. Current enterprise exposure may be low, but mobile fleets, BYOD programs, and legacy device images should verify whether the package exists. Treat this as a targeted mobile hygiene issue, not a broad infrastructure emergency. Prioritize confirmation across managed Android assets, remove or block the vulnerable app where found, and monitor for vendor guidance because the source bundle does not identify a patch. Mitigation focus: Inventory managed Android devices for the named package and version.; Remove the app if business use is not required.; Check vendor or app-store guidance for any fixed release..

Prepared

Jun 14, 2026, 06:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.