CVE-2015-1484

MEDIUM 6.9CVE-2015-1484 · Published 22/04/2015 · updated 17/06/2026

In short

CVE-2015-1484 is a MEDIUM (CVSS 6.9) vulnerability affecting workspace streaming (symantec).
Chance of exploitation in the next 30 days (EPSS): 0.45%, higher than 38.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
workspace streaming symantec	`= 6.1= 7.5`	No fix yet

Description

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

References

securityfocus.com/bid/73925
securitytracker.com/id/1032133
symantec.com/security_response/securityupdates/detail.jsp · Vendor Advisory

More vulnerabilities in workspace streaming

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free