PT-2014-4401 · Ntt Docomo+1 · Sp Mode Mail+1

Hironori Tokuta · Published 2014-03-19 · Updated 2014-03-20 · CVE-2014-1979

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions NTT DOCOMO sp mode mail application versions 5900 through 6300 for Android 4.0.x NTT DOCOMO sp mode mail application versions 6000 through 6620 for Android 4.1 through 4.4

Description The issue allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message.

Recommendations For versions 5900 through 6300, update to a version outside of this range to mitigate the risk. For versions 6000 through 6620, update to a version outside of this range to mitigate the risk.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2014-1979

Affected Products

Android

Sp Mode Mail

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-1979 · Security Note
• http://jvn.jp/en/jp/JVN89260331/index.html · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000029 · Note