CVE-2015-0884 Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse applicati...
MediumCVSS 6.9
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| toshiba bluetooth stack | = 9.10.27(t) | No fix listed |
| toshiba service station | <= 2.2.13 | No fix listed |
References
- jvn.jp
- VU#632140 third-party-advisory us-government-resource
- 1031825 vdb-entry
- www.support.toshiba.com
- www.support.toshiba.com