CVE-2015-1484

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.45%

Published

Apr 22, 2015

Modified

May 6, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Affected Products (2)

symantec · workspace_streamingvulnerable

References (6)

http://www.securityfocus.com/bid/73925

http://www.securitytracker.com/id/1032133

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150410_00

Vendor Advisory

http://www.securityfocus.com/bid/73925

http://www.securitytracker.com/id/1032133

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150410_00

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs