Lucene search

[email protected]CVE-2010-2793

HistoryDec 08, 2010 - 6:00 p.m.

CVE-2010-2793

2010-12-0818:00:03

CWE-362

[email protected]

web.nvd.nist.gov

cve-2010-2793

race condition

spice

internet explorer

red hat enterprise virtualization

rhev manager

plug-in

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.

Affected configurations

NVD

Node

redhatspice-activexMatch-

redhatenterprise_virtualization_managerRange≤2.2.3

redhatenterprise_virtualization_managerMatch2.1

redhatenterprise_virtualization_managerMatch2.2

CPENameOperatorVersion
redhat:spice-activexredhat spice-activexeq-
redhat:enterprise_virtualization_managerredhat enterprise virtualization managerle2.2.3
redhat:enterprise_virtualization_managerredhat enterprise virtualization managereq2.1
redhat:enterprise_virtualization_managerredhat enterprise virtualization managereq2.2

CPE	Name	Operator	Version
redhat:spice-activex	redhat spice-activex	eq	-
redhat:enterprise_virtualization_manager	redhat enterprise virtualization manager	le	2.2.3
redhat:enterprise_virtualization_manager	redhat enterprise virtualization manager	eq	2.1
redhat:enterprise_virtualization_manager	redhat enterprise virtualization manager	eq	2.2

References

securitytracker.com/id?1024825

www.securityfocus.com/bid/45213

bugzilla.redhat.com/show_bug.cgi?id=620355

rhn.redhat.com/errata/RHSA-2010-0818.html

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-2793

cvelist1 nvd1 prion1