PT-2014-4399 · Ntt Docomo+1 · Sp Mode Mail+1

Satoru Takekoshi · Published 2014-03-19 · Updated 2014-03-20 · CVE-2014-1977

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NTT DOCOMO sp mode mail application versions 6300 and earlier for Android 4.0.x NTT DOCOMO sp mode mail application versions 6700 and earlier for Android 4.1 through 4.4

Description The issue allows attackers to obtain sensitive information via a crafted application, due to weak permissions for attachments during the processing of incoming e-mail messages.

Recommendations For versions 6300 and earlier for Android 4.0.x, update to a version that properly secures attachments during e-mail processing. For versions 6700 and earlier for Android 4.1 through 4.4, update to a version that properly secures attachments during e-mail processing.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-1977

Affected Products

Android

Sp Mode Mail

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-1977 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000027 · Note
• http://jvn.jp/en/jp/JVN81739241/index.html · Note