CVE-2015-8156 Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTE...
HighCVSS 7.8
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec endpoint encryption | = 11.0 | No fix listed |
| symantec endpoint encryption | = 11.0.0 | No fix listed |
| symantec endpoint encryption | = 11.0.1 | No fix listed |
References
- 90050 vdb-entry
- www.symantec.com vendor-advisory