CVE-2014-1977: Medium severity Nttdocomo Spmode Mail Android Android vulnerability
Published Mar 19, 2014
·Updated
The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application.
Affected Software
99 affected components
Nttdocomo Spmode Mail Android Android<=6300
Nttdocomo Spmode Mail Android=2546
Nttdocomo Spmode Mail Android=2631
Nttdocomo Spmode Mail Android=3000
Nttdocomo Spmode Mail Android=3100
Nttdocomo Spmode Mail Android=3200
Nttdocomo Spmode Mail Android=3300
Nttdocomo Spmode Mail Android=3400
Nttdocomo Spmode Mail Android=4000
Nttdocomo Spmode Mail Android=4200
Nttdocomo Spmode Mail Android=4300
Nttdocomo Spmode Mail Android=4400
Nttdocomo Spmode Mail Android=4500
Nttdocomo Spmode Mail Android=4600
Nttdocomo Spmode Mail Android=4700
Nttdocomo Spmode Mail Android=4800
Nttdocomo Spmode Mail Android=4900
Nttdocomo Spmode Mail Android=5000
Nttdocomo Spmode Mail Android=5100
Nttdocomo Spmode Mail Android=5200
Nttdocomo Spmode Mail Android=5300
Nttdocomo Spmode Mail Android=5400
Nttdocomo Spmode Mail Android=5500
Nttdocomo Spmode Mail Android=5550
Google Android=4.0
Google Android=4.0.1
Google Android=4.0.2
Google Android=4.0.3
Google Android=4.0.4
Nttdocomo Spmode Mail Android Android<=6700
Google Android=4.1
Google Android=4.1.2
Google Android=4.2
Google Android=4.2.1
Google Android=4.2.2
Google Android=4.3
Google Android=4.3.1
Google Android=4.4
All of the following
Any of the following
Nttdocomo Spmode Mail Android Android<=6300
Nttdocomo Spmode Mail Android=2546
Nttdocomo Spmode Mail Android=2631
Nttdocomo Spmode Mail Android=3000
Nttdocomo Spmode Mail Android=3100
Nttdocomo Spmode Mail Android=3200
Nttdocomo Spmode Mail Android=3300
Nttdocomo Spmode Mail Android=3400
Nttdocomo Spmode Mail Android=4000
Nttdocomo Spmode Mail Android=4200
Nttdocomo Spmode Mail Android=4300
Nttdocomo Spmode Mail Android=4400
Nttdocomo Spmode Mail Android=4500
Nttdocomo Spmode Mail Android=4600
Nttdocomo Spmode Mail Android=4700
Nttdocomo Spmode Mail Android=4800
Nttdocomo Spmode Mail Android=4900
Nttdocomo Spmode Mail Android=5000
Nttdocomo Spmode Mail Android=5100
Nttdocomo Spmode Mail Android=5200
Nttdocomo Spmode Mail Android=5300
Nttdocomo Spmode Mail Android=5400
Nttdocomo Spmode Mail Android=5500
Nttdocomo Spmode Mail Android=5550
Any of the following
Google Android=4.0
Google Android=4.0.1
Google Android=4.0.2
Google Android=4.0.3
Google Android=4.0.4
All of the following
Any of the following
Nttdocomo Spmode Mail Android Android<=6700
Nttdocomo Spmode Mail Android=2546
Nttdocomo Spmode Mail Android=2631
Nttdocomo Spmode Mail Android=3000
Nttdocomo Spmode Mail Android=3100
Nttdocomo Spmode Mail Android=3200
Nttdocomo Spmode Mail Android=3300
Nttdocomo Spmode Mail Android=3400
Nttdocomo Spmode Mail Android=4000
Nttdocomo Spmode Mail Android=4200
Nttdocomo Spmode Mail Android=4300
Nttdocomo Spmode Mail Android=4400
Nttdocomo Spmode Mail Android=4500
Nttdocomo Spmode Mail Android=4600
Nttdocomo Spmode Mail Android=4700
Nttdocomo Spmode Mail Android=4800
Nttdocomo Spmode Mail Android=4900
Nttdocomo Spmode Mail Android=5000
Nttdocomo Spmode Mail Android=5100
Nttdocomo Spmode Mail Android=5200
Nttdocomo Spmode Mail Android=5300
Nttdocomo Spmode Mail Android=5400
Nttdocomo Spmode Mail Android=5500
Nttdocomo Spmode Mail Android=5550
Any of the following
Google Android=4.1
Google Android=4.1.2
Google Android=4.2
Google Android=4.2.1
Google Android=4.2.2
Google Android=4.3
Google Android=4.3.1
Google Android=4.4
Event History
Mar 19, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-1977?
CVE-2014-1977 is considered a moderate severity vulnerability due to the weak permissions for attachments in the application.
2
How do I fix CVE-2014-1977?
To fix CVE-2014-1977, it is recommended to update the NTT DOCOMO sp mode mail application to the latest version available.
3
What versions are affected by CVE-2014-1977?
CVE-2014-1977 affects NTT DOCOMO sp mode mail application versions 6300 and earlier, as well as versions 6700 and earlier for Android 4.1 through 4.4.
4
What type of data can be compromised due to CVE-2014-1977?
CVE-2014-1977 allows attackers to obtain sensitive information via crafted email attachments, compromising user data.
5
Is CVE-2014-1977 still a risk for current versions of the application?
No, CVE-2014-1977 is not a risk for current versions of the NTT DOCOMO sp mode mail application if kept up to date.