Design/Logic Flaw

The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message...

CVE-2014-1979

The CVE-2014-1979 issue affects NTT DOCOMO sp mode mail for Android (rev. 5900–6300 on Android 4.0.x; 6000–6620 on Android 4.1–4.4). The root cause is improper handling of Deco-mail emoticon POP data in emails, allowing remote attackers to execute arbitrary Java methods with the mail client’s pri...

PT-2014-4401

Name of the Vulnerable Software and Affected Versions NTT DOCOMO sp mode mail application versions 5900 through 6300 for Android 4.0.x NTT DOCOMO sp mode mail application versions 6000 through 6620 for Android 4.1 through 4.4 Description The issue allows remote attackers to execute arbitrary Java...

CVE-2014-1979: Improper Control of Generation of Code

The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message...

JVN#89260331: sp mode mail vulnerability where Java methods may be executed

sp mode mail provided by NTT DOCOMO contains an issue in the processing Deco-mail emoticon POP, which may lead to the execution of arbitrary Java methods that can be executed with the privileges of sp mode mail. Impact When a specially crafted email is opened, an arbitrary Java method that can be...