Vulnerability in Google Android

CVE-2014-1977

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application.

EPSS: 0.009 (55.8th percentile) — read the EPSS interpretation.

Affected products

Google Android — versions 4.0, 4.0.1, 4.0.2
Nttdocomo Spmode_mail_android — versions 2546, 2631, 3000
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)