VULNERABILITY INTELLIGENCE

CVE-2014-1979

CVSS score6.8 MEDIUM
EPSS probability1.70%
CISA KEVNot currently listed
Published2014-03-19
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references