Threat Outbreak Alert: Fake Multimedia Email Messages on March 25, 2014

Medium Alert ID: 33497 First Published: 2014 March 25 15:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a multimedia message for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Email Messages with Malicious Attachments on March 24, 2014

Medium Alert ID: 33492 First Published: 2014 March 25 13:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Hotel Reservation Email Messages on March 24, 2014

Medium Alert ID: 33482 First Published: 2014 March 24 20:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a hotel reservation notice for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Medical Results Report Email Messages on March 24, 2014

Medium Alert ID: 33477 First Published: 2014 March 24 15:43 GMT Last Updated: 2014 March 25 12:24 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain blood test results for the recipient. The text in the email message attemp...

Threat Outbreak Alert: Fake Sales Notification Email Messages on March 21, 2014

Medium Alert ID: 33467 First Published: 2014 March 24 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales notification for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 21, 2014

Medium Alert ID: 33466 First Published: 2014 March 24 13:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain an attachment for the recipient. The email attempts to convince the recipient to open the attachment for details. However...

Open-Xchange Security Advisory 2014-02-10

Product: Open-Xchange AppSuite Vendor: Open-Xchange GmbH Internal reference: 30820 Bug ID Vulnerability type: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page Vulnerable version: 7.4.1 and earlier Vulnerable component: backend Fixed version: 7.2.2-rev31, 7.4.0-rev27,...

Microsoft Word CVE-2014-1761 Remote Memory Corruption Vulnerability

Description Microsoft Word is prone to a remote memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

Threat Outbreak Alert: Fake Tax Refund Notification Email Messages on March 21, 2014

Medium Alert ID: 33457 First Published: 2014 March 21 13:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax refund notification for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Voicemail Notification Email Messages on March 21, 2014

Medium Alert ID: 33452 First Published: 2014 March 21 13:42 GMT Last Updated: 2014 March 24 13:20 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a voicemail for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 21, 2014

Medium Alert ID: 33454 First Published: 2014 March 21 13:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body containing an attachment for the recipient. However, the .rar attachment contains a malicious .exe file that...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 20, 2014

Medium Alert ID: 33439 First Published: 2014 March 20 19:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment for...

Threat Outbreak Alert: Email Messages with Malicious Attachments on March 19, 2014

Medium Alert ID: 33436 First Published: 2014 March 20 18:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to convince the recipient to open the attachment for...

Threat Outbreak Alert: Fake Email Messages with Malicious Attachments on March 18, 2014

Medium Alert ID: 33402 First Published: 2014 March 19 15:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with blank message body and document attached for the recipient. The email message attempts to convince the recipient to open the...

CVE-2014-1977

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application...

Code injection

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application...

CVE-2014-1977

The CVE-2014-1977 entry concerns NTT DOCOMO’s sp mode mail application for Android (6300 series on 4.0.x and 6700 on 4.1–4.4). The vulnerability arises from weak permissions on attachments during processing of incoming emails, enabling a crafted Android application to obtain sensitive information...

CVE-2014-1977

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allows attackers to obtain sensitive information via a crafted application...

Threat Outbreak Alert: Fake Product Pricing Information Request Email Messages on March 18, 2014

Medium Alert ID: 33379 First Published: 2014 March 18 16:11 GMT Last Updated: 2014 March 19 14:00 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product inquiry for the recipient. The text in the email message attempt...

sp mode mail issue when accessing attachments in incoming mail

Overview sp mode mail provided by NTT DOCOMO contains a function that allows other Android applications to access attachments for incoming emails. This function contains an issue in the restriction of access permissions. Satoru Takekoshi reported this vulnerability to IPA. JPCERT/CC coordinated...