CVE-2014-1977
First published: Wed Mar 19 2014(Updated: )
The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application.
Credit: vultures@jpcert.or.jp
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Nttdocomo Spmode Mail | <=6300 | |
| Nttdocomo Spmode Mail | =2546 | |
| Nttdocomo Spmode Mail | =2631 | |
| Nttdocomo Spmode Mail | =3000 | |
| Nttdocomo Spmode Mail | =3100 | |
| Nttdocomo Spmode Mail | =3200 | |
| Nttdocomo Spmode Mail | =3300 | |
| Nttdocomo Spmode Mail | =3400 | |
| Nttdocomo Spmode Mail | =4000 | |
| Nttdocomo Spmode Mail | =4200 | |
| Nttdocomo Spmode Mail | =4300 | |
| Nttdocomo Spmode Mail | =4400 | |
| Nttdocomo Spmode Mail | =4500 | |
| Nttdocomo Spmode Mail | =4600 | |
| Nttdocomo Spmode Mail | =4700 | |
| Nttdocomo Spmode Mail | =4800 | |
| Nttdocomo Spmode Mail | =4900 | |
| Nttdocomo Spmode Mail | =5000 | |
| Nttdocomo Spmode Mail | =5100 | |
| Nttdocomo Spmode Mail | =5200 | |
| Nttdocomo Spmode Mail | =5300 | |
| Nttdocomo Spmode Mail | =5400 | |
| Nttdocomo Spmode Mail | =5500 | |
| Nttdocomo Spmode Mail | =5550 | |
| Android | =4.0 | |
| Android | =4.0.1 | |
| Android | =4.0.2 | |
| Android | =4.0.3 | |
| Android | =4.0.4 | |
| Nttdocomo Spmode Mail | <=6700 | |
| Android | =4.1 | |
| Android | =4.1.2 | |
| Android | =4.2 | |
| Android | =4.2.1 | |
| Android | =4.2.2 | |
| Android | =4.3 | |
| Android | =4.3.1 | |
| Android | =4.4 | |
| All of | ||
| Any of | ||
| Nttdocomo Spmode Mail | <=6300 | |
| Nttdocomo Spmode Mail | =2546 | |
| Nttdocomo Spmode Mail | =2631 | |
| Nttdocomo Spmode Mail | =3000 | |
| Nttdocomo Spmode Mail | =3100 | |
| Nttdocomo Spmode Mail | =3200 | |
| Nttdocomo Spmode Mail | =3300 | |
| Nttdocomo Spmode Mail | =3400 | |
| Nttdocomo Spmode Mail | =4000 | |
| Nttdocomo Spmode Mail | =4200 | |
| Nttdocomo Spmode Mail | =4300 | |
| Nttdocomo Spmode Mail | =4400 | |
| Nttdocomo Spmode Mail | =4500 | |
| Nttdocomo Spmode Mail | =4600 | |
| Nttdocomo Spmode Mail | =4700 | |
| Nttdocomo Spmode Mail | =4800 | |
| Nttdocomo Spmode Mail | =4900 | |
| Nttdocomo Spmode Mail | =5000 | |
| Nttdocomo Spmode Mail | =5100 | |
| Nttdocomo Spmode Mail | =5200 | |
| Nttdocomo Spmode Mail | =5300 | |
| Nttdocomo Spmode Mail | =5400 | |
| Nttdocomo Spmode Mail | =5500 | |
| Nttdocomo Spmode Mail | =5550 | |
| Any of | ||
| Android | =4.0 | |
| Android | =4.0.1 | |
| Android | =4.0.2 | |
| Android | =4.0.3 | |
| Android | =4.0.4 | |
| All of | ||
| Any of | ||
| Nttdocomo Spmode Mail | <=6700 | |
| Nttdocomo Spmode Mail | =2546 | |
| Nttdocomo Spmode Mail | =2631 | |
| Nttdocomo Spmode Mail | =3000 | |
| Nttdocomo Spmode Mail | =3100 | |
| Nttdocomo Spmode Mail | =3200 | |
| Nttdocomo Spmode Mail | =3300 | |
| Nttdocomo Spmode Mail | =3400 | |
| Nttdocomo Spmode Mail | =4000 | |
| Nttdocomo Spmode Mail | =4200 | |
| Nttdocomo Spmode Mail | =4300 | |
| Nttdocomo Spmode Mail | =4400 | |
| Nttdocomo Spmode Mail | =4500 | |
| Nttdocomo Spmode Mail | =4600 | |
| Nttdocomo Spmode Mail | =4700 | |
| Nttdocomo Spmode Mail | =4800 | |
| Nttdocomo Spmode Mail | =4900 | |
| Nttdocomo Spmode Mail | =5000 | |
| Nttdocomo Spmode Mail | =5100 | |
| Nttdocomo Spmode Mail | =5200 | |
| Nttdocomo Spmode Mail | =5300 | |
| Nttdocomo Spmode Mail | =5400 | |
| Nttdocomo Spmode Mail | =5500 | |
| Nttdocomo Spmode Mail | =5550 | |
| Any of | ||
| Android | =4.1 | |
| Android | =4.1.2 | |
| Android | =4.2 | |
| Android | =4.2.1 | |
| Android | =4.2.2 | |
| Android | =4.3 | |
| Android | =4.3.1 | |
| Android | =4.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-1977?
CVE-2014-1977 is considered a moderate severity vulnerability due to the weak permissions for attachments in the application.
How do I fix CVE-2014-1977?
To fix CVE-2014-1977, it is recommended to update the NTT DOCOMO sp mode mail application to the latest version available.
What versions are affected by CVE-2014-1977?
CVE-2014-1977 affects NTT DOCOMO sp mode mail application versions 6300 and earlier, as well as versions 6700 and earlier for Android 4.1 through 4.4.
What type of data can be compromised due to CVE-2014-1977?
CVE-2014-1977 allows attackers to obtain sensitive information via crafted email attachments, compromising user data.
Is CVE-2014-1977 still a risk for current versions of the application?
No, CVE-2014-1977 is not a risk for current versions of the NTT DOCOMO sp mode mail application if kept up to date.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/first-publish-date
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/nttdocomo
- canonical/nttdocomo spmode mail
- version/nttdocomo spmode mail/6300
- version/nttdocomo spmode mail/2546
- version/nttdocomo spmode mail/2631
- version/nttdocomo spmode mail/3000
- version/nttdocomo spmode mail/3100
- version/nttdocomo spmode mail/3200
- version/nttdocomo spmode mail/3300
- version/nttdocomo spmode mail/3400
- version/nttdocomo spmode mail/4000
- version/nttdocomo spmode mail/4200
- version/nttdocomo spmode mail/4300
- version/nttdocomo spmode mail/4400
- version/nttdocomo spmode mail/4500
- version/nttdocomo spmode mail/4600
- version/nttdocomo spmode mail/4700
- version/nttdocomo spmode mail/4800
- version/nttdocomo spmode mail/4900
- version/nttdocomo spmode mail/5000
- version/nttdocomo spmode mail/5100
- version/nttdocomo spmode mail/5200
- version/nttdocomo spmode mail/5300
- version/nttdocomo spmode mail/5400
- version/nttdocomo spmode mail/5500
- version/nttdocomo spmode mail/5550
- vendor/google
- canonical/android
- version/android/4.0
- version/android/4.0.1
- version/android/4.0.2
- version/android/4.0.3
- version/android/4.0.4
- version/nttdocomo spmode mail/6700
- version/android/4.1
- version/android/4.1.2
- version/android/4.2
- version/android/4.2.1
- version/android/4.2.2
- version/android/4.3
- version/android/4.3.1
- version/android/4.4