CVEvulnerability
CVE-2015-0884
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Description
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
Affected configurations
• toshiba bluetooth stack 9.10.27\(t\)
• toshiba service station (<= 2.2.13)
References
- http://jvn.jp/vu/JVNVU99205169/index.html jvn.jp
- http://www.kb.cert.org/vuls/id/632140 Third Party Advisory, US Government Resource
- http://www.securitytracker.com/id/1031825 www.securitytracker.com
- http://www.support.toshiba.com/sscontent?contentId=4007185 www.support.toshiba.com
- http://www.support.toshiba.com/sscontent?contentId=4007187 www.support.toshiba.com
- http://jvn.jp/vu/JVNVU99205169/index.html jvn.jp
- http://www.kb.cert.org/vuls/id/632140 Third Party Advisory, US Government Resource
- http://www.securitytracker.com/id/1031825 www.securitytracker.com
- http://www.support.toshiba.com/sscontent?contentId=4007185 www.support.toshiba.com
- http://www.support.toshiba.com/sscontent?contentId=4007187 www.support.toshiba.com