Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

NTT DOCOMO sp mode mail Android app runs attacker code

CVE-2014-1979 · published 12 years ago
Summary

The NTT DOCOMO sp mode mail app for Android versions 4.0 to 4.4 (versions 5900-6300 and 6000-6620) can be tricked into executing code chosen by a remote attacker through a specially crafted email. This could let the attacker take control of the device or steal data. Apply any available updates from the vendor or stop using the app until it is patched.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
nttdocomo spmode_mail_android 6000
6200
6620
5900
6300
cpe:2.3:a:nttdocomo:spmode_mail_android:6000:*:*:*:*:android:*:*
Original advisory text
The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail...
The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.8 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published19 Mar 2014
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2014-1979 · NVD
Track software like this
Free during beta