CVE-2015-1574 - Vulnerability Details - OpenCVE

The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a "Content-Disposition: ;" header in an e-mail message.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Google	Email

Configuration 1 [-]

cpe:2.3:a:google:email:4.2.2.0200:*:*:*:*:android:*:*

No data.

References

Link	Providers
http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html
http://openwall.com/lists/oss-security/2015/02/10/9
http://openwall.com/lists/oss-security/2015/02/12/15
http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html
http://seclists.org/fulldisclosure/2015/Feb/58
http://www.securityfocus.com/archive/1/534703/100/0/threaded

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-02-15T20:00:00

Updated: 2024-08-06T04:47:17.050Z

Reserved: 2015-02-11T00:00:00

Link: CVE-2015-1574

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2015-02-15T20:59:01.620

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-1574

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2015-02-09T00:00:00", "descriptions": [{"lang": "en", "value": "The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a \"Content-Disposition: ;\" header in an e-mail message."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-09T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20150214 CVE-2015-1574 - Google Email App 4.2.2 remote denial of service", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2015/Feb/58"}, {"tags": ["x_refsource_MISC"], "url": "http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html"}, {"name": "[oss-security] 20150210 Re: Re: CVE-Request -- Google Email App 4.2.2 remote denial of service", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2015/02/10/9"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html"}, {"name": "[oss-security] 20150212 Re: CVE-Request -- Google Email App 4.2.2 remote denial of service", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2015/02/12/15"}, {"name": "20150213 CVE-2015-1574 - Google Email App 4.2.2 remote denial of service", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/534703/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2015-1574", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a \"Content-Disposition: ;\" header in an e-mail message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20150214 CVE-2015-1574 - Google Email App 4.2.2 remote denial of service", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2015/Feb/58"}, {"name": "http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html", "refsource": "MISC", "url": "http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html"}, {"name": "[oss-security] 20150210 Re: Re: CVE-Request -- Google Email App 4.2.2 remote denial of service", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2015/02/10/9"}, {"name": "http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html"}, {"name": "[oss-security] 20150212 Re: CVE-Request -- Google Email App 4.2.2 remote denial of service", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2015/02/12/15"}, {"name": "20150213 CVE-2015-1574 - Google Email App 4.2.2 remote denial of service", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/534703/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T04:47:17.050Z"}, "title": "CVE Program Container", "references": [{"name": "20150214 CVE-2015-1574 - Google Email App 4.2.2 remote denial of service", "tags": ["mailing-list", "x_refsource_FULLDISC", "x_transferred"], "url": "http://seclists.org/fulldisclosure/2015/Feb/58"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html"}, {"name": "[oss-security] 20150210 Re: Re: CVE-Request -- Google Email App 4.2.2 remote denial of service", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2015/02/10/9"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html"}, {"name": "[oss-security] 20150212 Re: CVE-Request -- Google Email App 4.2.2 remote denial of service", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2015/02/12/15"}, {"name": "20150213 CVE-2015-1574 - Google Email App 4.2.2 remote denial of service", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/534703/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2015-1574", "datePublished": "2015-02-15T20:00:00", "dateReserved": "2015-02-11T00:00:00", "dateUpdated": "2024-08-06T04:47:17.050Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:google:email:4.2.2.0200:*:*:*:*:android:*:*", "matchCriteriaId": "B2EBAB46-7DCD-49CC-8978-38D79555FAE1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Google Email application 4.2.2.0200 for Android allows remote attackers to cause a denial of service (persistent application crash) via a \"Content-Disposition: ;\" header in an e-mail message."}, {"lang": "es", "value": "La aplicaci\u00f3n para Android Google Email 4.2.2.0200 permite a atacantes remotos causar una denegaci\u00f3n de servicio (ca\u00edda de aplicaci\u00f3n persistente) a trav\u00e9s de una cabecera 'Content-Disposition: ;' en un mensaje de email."}], "id": "CVE-2015-1574", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-02-15T20:59:01.620", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html"}, {"source": "cve@mitre.org", "url": "http://openwall.com/lists/oss-security/2015/02/10/9"}, {"source": "cve@mitre.org", "url": "http://openwall.com/lists/oss-security/2015/02/12/15"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html"}, {"source": "cve@mitre.org", "url": "http://seclists.org/fulldisclosure/2015/Feb/58"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/534703/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://hmarco.org/bugs/google_email_app_4.2.2_denial_of_service.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://openwall.com/lists/oss-security/2015/02/10/9"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://openwall.com/lists/oss-security/2015/02/12/15"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://packetstormsecurity.com/files/130388/Google-Email-4.4.2.0200-Denial-Of-Service.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2015/Feb/58"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/534703/100/0/threaded"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-19"}], "source": "nvd@nist.gov", "type": "Primary"}]}