NVD

Id
23310  
Name
CVE-2015-0884  
Description
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-02-27  
Modified Date
2015-11-19  
Seq
2015-0884  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
123758 23310 CVE-2015-0884 http://jvn.jp/vu/JVNVU99205169/index.html  View
123759 23310 CVE-2015-0884 VU#632140  View
123760 23310 CVE-2015-0884 1031825  View
123761 23310 CVE-2015-0884 http://www.support.toshiba.com/sscontent?contentId=4007185  View
123762 23310 CVE-2015-0884 http://www.support.toshiba.com/sscontent?contentId=4007187  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6319 JVNDB-2015-001639 Bluetooth Stack for Windows by Toshiba および TOSHIBA Service Station に権限昇格の脆弱性 株式会社東芝が提供する Bluetooth 制御ソフトウエアである Bluetooth Stack for Windows by Toshiba およびシステム管理アプリケーションソフトウエアである TOSHIBA Service Station には、引用符で囲まれていない Windows 検索パスに起因する権限昇格の脆弱性が存在します (CWE-428)。 CVE-2015-0884 78095 CVE-2015-0884 23310 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001639.html 2015-03-02 2015-03-03 View