Red Hat Security AdvisoryRHSA-2010:0651
spice-xpi security and bug fix update
Released 2010-08-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 5 client) spice-xpi-2.2-2.3.el5_5, spice-xpi-2.2-2.3.el5_5.i386
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) spice-xpi-2.2-2.3.el5_5, spice-xpi-2.2-2.3.el5_5.i386
Fixes 2 records
Priority LOW 16
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00314 · Published 2010-08-30 · Fixed CWE-59
Priority LOW 16
Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information, and conduct man-in-the-middle attacks, by providing a UNIX socket for communication between this plu…
CVSS 2.0LOW 3.3· Local · No auth · Interaction — · EPSS 0.00246 · Published 2010-08-30 · Fixed CWE-362
