CVE Vulnerabilities

CVE-2014-1977

Published: Mar 19, 2014 | Modified: Mar 20, 2014
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application.

Affected Software

Name Vendor Start Version End Version
Spmode_mail_android Nttdocomo * 6300 (including)
Spmode_mail_android Nttdocomo 2546 (including) 2546 (including)
Spmode_mail_android Nttdocomo 2631 (including) 2631 (including)
Spmode_mail_android Nttdocomo 3000 (including) 3000 (including)
Spmode_mail_android Nttdocomo 3100 (including) 3100 (including)
Spmode_mail_android Nttdocomo 3200 (including) 3200 (including)
Spmode_mail_android Nttdocomo 3300 (including) 3300 (including)
Spmode_mail_android Nttdocomo 3400 (including) 3400 (including)
Spmode_mail_android Nttdocomo 4000 (including) 4000 (including)
Spmode_mail_android Nttdocomo 4200 (including) 4200 (including)
Spmode_mail_android Nttdocomo 4300 (including) 4300 (including)
Spmode_mail_android Nttdocomo 4400 (including) 4400 (including)
Spmode_mail_android Nttdocomo 4500 (including) 4500 (including)
Spmode_mail_android Nttdocomo 4600 (including) 4600 (including)
Spmode_mail_android Nttdocomo 4700 (including) 4700 (including)
Spmode_mail_android Nttdocomo 4800 (including) 4800 (including)
Spmode_mail_android Nttdocomo 4900 (including) 4900 (including)
Spmode_mail_android Nttdocomo 5000 (including) 5000 (including)
Spmode_mail_android Nttdocomo 5100 (including) 5100 (including)
Spmode_mail_android Nttdocomo 5200 (including) 5200 (including)
Spmode_mail_android Nttdocomo 5300 (including) 5300 (including)
Spmode_mail_android Nttdocomo 5400 (including) 5400 (including)
Spmode_mail_android Nttdocomo 5500 (including) 5500 (including)
Spmode_mail_android Nttdocomo 5550 (including) 5550 (including)

References