Published:2014/03/18  Last Updated:2014/03/18

JVN#81739241
sp mode mail issue when accessing attachments in incoming mail

Overview

sp mode mail provided by NTT DOCOMO contains an issue with the access restrictions for attachments in incoming emails.

Products Affected

  • sp mode mail rev.6300 and earlier for Android 4.0.X and earlier
  • sp mode mail rev.6700 and earlier for Android 4.1 and later

Description

sp mode mail provided by NTT DOCOMO contains a function that allows other Android applications to access attachments for incoming emails. This function contains an issue in the restriction of access permissions.

Impact

If a malicious Android application is installed on the device, attachments for an incoming email may be obtained.

Solution

An update to address this issue will not be provided by the developer.

Note on usage:
According to the developer, a warning about this issue has been included in the consent agreement that is displayed when launching the application for the first time in sp mode mail rev.6400 and later for Android 4.0.X and earlier, and sp mode mail rev.6800 and later for Android 4.1 and later.

Vendor Status

Vendor Status Last Update Vendor Notes
NTT DOCOMO, INC. Vulnerable 2014/03/18

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

Analyzed on 2014.03.18

Measures Conditions Severity
Access Required can be attacked over the Internet using packets
  • High
Authentication anonymous or no authentication (IP addresses do not count)
  • High
User Interaction Required the user must be convinced to take a difficult or suspicious action. If the honest user must have elevated privileges, they are likely to be more suspicious
  • Low
Exploit Complexity some expertise and/or luck required (most buffer overflows, guessing correctly in small space, expertise in Windows function calls)
  • Mid-High

Description of each analysis measures

Comment

This analysis assumes that the user is tricked into installing a malicious application.

Credit

Satoru Takekoshi reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE CVE-2014-1977
JVN iPedia JVNDB-2014-000027