Unscored severity · published Feb 28, 2015
CVE-2015-0884
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Bluetooth Stack · Toshiba
9.10.27(t) · source: NVD
SS
Service Station · Toshiba
through 2.2.13 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0884
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0884
jvn.jp
http://jvn.jp/vu/JVNVU99205169/index.html
Third Party Advisory
http://www.kb.cert.org/vuls/id/632140
www.securitytracker.com
http://www.securitytracker.com/id/1031825
www.support.toshiba.com
http://www.support.toshiba.com/sscontent?contentId=4007185
www.support.toshiba.com
http://www.support.toshiba.com/sscontent?contentId=4007187
More from Bluetooth Stack
–
CVE-2006-5611
Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and attack vectors, related to the 4.20.01(T) "Security fix." NOTE: due to the lack of…
–
CVE-2006-3146
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that…
–
CVE-2006-0212
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote…