Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Mon, 09 Feb 2015 20:07:34 +0100
From: Hector Marco <>
Subject: CVE-Request -- Google Email App 4.2.2 remote denial of service


A bug in the stock Google email application version has been 
found. An attacker can remotely perform an Denial Of Service attack by 
sending a specially crafted email. No interaction form the user is 
needed to produce the crash just receive the malicious email.

When the victim receives the malicious email, the application crashes 
while trying to download the email.The email application can not be used 
until the offending email is removed.

The email version running on a Samsung Galaxy 4 mini fully 
updated (19 Jan 2015) is vulnerable. Newer versions are not 

Proof of concept exploit remote crasher and more details:

Could you please assign a CVE-ID for this?

Hector Marco.

Cyber-security researcher at

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.