Vulnerability in Microsoft Windows
CVE-2015-0884
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
EPSS: 0.004 (30.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows
- Toshiba Bluetooth_stack — versions 9.10.27\(t\)
- Toshiba Service_station
- N/a — versions n/a
References
- vultures@jpcert.or.jp (x_refsource_CONFIRM)
- vultures@jpcert.or.jp (vdb-entry, x_refsource_SECTRACK)
- vultures@jpcert.or.jp (x_refsource_CONFIRM)
- vultures@jpcert.or.jp (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_MISC)