CVEvulnerability

CVE-2014-1977

4.3 MEDIUM Published 2014-03-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-03-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-264

Description

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application.

Affected configurations

• nttdocomo spmode mail android (<= 6300) • nttdocomo spmode mail android 2546 • nttdocomo spmode mail android 2631 • nttdocomo spmode mail android 3000 • nttdocomo spmode mail android 3100 • nttdocomo spmode mail android 3200 • nttdocomo spmode mail android 3300 • nttdocomo spmode mail android 3400 • nttdocomo spmode mail android 4000 • nttdocomo spmode mail android 4200 • nttdocomo spmode mail android 4300 • nttdocomo spmode mail android 4400 • nttdocomo spmode mail android 4500 • nttdocomo spmode mail android 4600 • nttdocomo spmode mail android 4700 • nttdocomo spmode mail android 4800 • nttdocomo spmode mail android 4900 • nttdocomo spmode mail android 5000 • nttdocomo spmode mail android 5100 • nttdocomo spmode mail android 5200 • nttdocomo spmode mail android 5300 • nttdocomo spmode mail android 5400 • nttdocomo spmode mail android 5500 • nttdocomo spmode mail android 5550 • nttdocomo spmode mail android (<= 6700)

Related

Weakness · not in database (1)

References