TI-2012-01141 Aliases CVE-2012-1244 GHSA-pf5x-3hjf-g387

The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly…

LOW 27CWE-310Published 2012-04-27 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: —
Confidentiality · integrity · availability: Partial · Partial · None
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The NTT DOCOMO sp mode mail application 5400 and earlier for Android does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Why it matters now

EPSS 0.00657 51st percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 21

CPE	Versions	Role	Vendor
cpe:2.3:a:nttdocomo:spmode_mail_android::::::::	up to 5400	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:2546:::::::*	2546	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:2631:::::::*	2631	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3000:::::::*	3000	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3100:::::::*	3100	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3200:::::::*	3200	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3300:::::::*	3300	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3400:::::::*	3400	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4000:::::::*	4000	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4200:::::::*	4200	Vulnerable	NTT DOCOMO, INC.

cpe:2.3:a:nttdocomo:spmode_mail_android:*:*:*:*:*:*:*:* Versions up to 5400 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:2546:*:*:*:*:*:*:* Versions 2546 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:2631:*:*:*:*:*:*:* Versions 2631 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3000:*:*:*:*:*:*:* Versions 3000 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3100:*:*:*:*:*:*:* Versions 3100 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3200:*:*:*:*:*:*:* Versions 3200 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3300:*:*:*:*:*:*:* Versions 3300 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:3400:*:*:*:*:*:*:* Versions 3400 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4000:*:*:*:*:*:*:* Versions 4000 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4200:*:*:*:*:*:*:* Versions 4200 Vulnerable ·NTT DOCOMO, INC.

Show 11 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:nttdocomo:spmode_mail_android:4300:::::::*	4300	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4400:::::::*	4400	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4500:::::::*	4500	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4600:::::::*	4600	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4700:::::::*	4700	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4800:::::::*	4800	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4900:::::::*	4900	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:5000:::::::*	5000	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:5100:::::::*	5100	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:5200:::::::*	5200	Vulnerable	NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:5300:::::::*	5300	Vulnerable	NTT DOCOMO, INC.

cpe:2.3:a:nttdocomo:spmode_mail_android:4300:*:*:*:*:*:*:* Versions 4300 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4400:*:*:*:*:*:*:* Versions 4400 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4500:*:*:*:*:*:*:* Versions 4500 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4600:*:*:*:*:*:*:* Versions 4600 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4700:*:*:*:*:*:*:* Versions 4700 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4800:*:*:*:*:*:*:* Versions 4800 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:4900:*:*:*:*:*:*:* Versions 4900 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:5000:*:*:*:*:*:*:* Versions 5000 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:5100:*:*:*:*:*:*:* Versions 5100 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:5200:*:*:*:*:*:*:* Versions 5200 Vulnerable ·NTT DOCOMO, INC.
cpe:2.3:a:nttdocomo:spmode_mail_android:5300:*:*:*:*:*:*:* Versions 5300 Vulnerable ·NTT DOCOMO, INC.

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2012-1244
2026-10-03 Alias added: GHSA-pf5x-3hjf-g387
2026-10-11 EPSS moved to the 50th–90th percentile

References

Advisory 2

Other 1

81629

TI-2014-01548 The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000… CVSS 2.0MEDIUM 6.8
TI-2014-01547 The application link interface in the NTT DOCOMO sp mode mail application 6100 through… CVSS 2.0MEDIUM 4.3
TI-2014-01546 The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences