Lucene search

[email protected]CVE-2014-1978

HistoryMar 19, 2014 - 2:17 p.m.

CVE-2014-1978

2014-03-1914:17:45

CWE-264

[email protected]

web.nvd.nist.gov

ntt docomo

sp mode mail

android

vulnerability

cve-2014-1978

sd card

sensitive information

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%

JSON

The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to obtain sensitive information via a crafted application.

Affected configurations

NVD

Node

nttdocomospmode_mail_androidMatch6100android

nttdocomospmode_mail_androidMatch6300android

AND

googleandroidMatch4.0

googleandroidMatch4.0.1

googleandroidMatch4.0.2

googleandroidMatch4.0.3

googleandroidMatch4.0.4

Node

nttdocomospmode_mail_androidMatch6130android

nttdocomospmode_mail_androidMatch6700android

AND

googleandroidMatch4.1

googleandroidMatch4.1.2

googleandroidMatch4.2

googleandroidMatch4.2.1

googleandroidMatch4.2.2

googleandroidMatch4.3

googleandroidMatch4.3.1

googleandroidMatch4.4

CPENameOperatorVersion
nttdocomo:spmode_mail_androidnttdocomo spmode mail androideq6100
nttdocomo:spmode_mail_androidnttdocomo spmode mail androideq6300

CPE	Name	Operator	Version
nttdocomo:spmode_mail_android	nttdocomo spmode mail android	eq	6100
nttdocomo:spmode_mail_android	nttdocomo spmode mail android	eq	6300

References

jvn.jp/en/jp/JVN05951929/index.html

jvndb.jvn.jp/jvndb/JVNDB-2014-000028

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%

JSON

Related for CVE-2014-1978

prion1 cvelist1 jvn1 nvd1