Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat…
Priority LOW 32CWE-362Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.
Summary
Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.
Why it matters now
EPSS 0.01018 63rd percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:spice-activex:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:* | up to 2.2.3 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Red Hat |
- cpe:2.3:a:redhat:spice-activex:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:* Versions up to 2.2.3 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_virtualization_manager:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_virtualization_manager:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Red Hat
Remediation
Red Hat 1 advisory
- RHSA-2010:0818 Released 2010-12-06 · Red Hat rating ImportantRed Hat Enterprise Virtualization Manager security update
- RHEV-M 2
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| RHEV-M 2 | Fixed | RHSA-2010:0818 |
Timeline
- 2026-10-02 Threatist record created from CVE-2010-2793
- 2026-10-03 Alias added: GHSA-75v4-749r-wgh6
References
Advisory 1
More Red Hat Enterprise Virtualization Manager vulnerabilities
- TI-2018-06436 A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures… CVSS 3.0HIGH 7.8
- TI-2015-06271 redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV… CVSS 3.0CRITICAL 9.1
- TI-2018-00992 Sensitive information in log files in [UNKNOWN] ovirt-engine-setup CVSS 3.0CRITICAL 9.8
- TI-2015-00207 Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to… CVSS 2.0MEDIUM 6.8
- TI-2014-02897 The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager… CVSS 2.0MEDIUM 6.5
- TI-2012-00796 The vds_installer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when… CVSS 2.0MEDIUM 6.8
Sources
- CVE-2010-2793 · CVE Program
- CVE-2010-2793 · NVD
- FIRST EPSS
- GHSA-75v4-749r-wgh6 · GitHub Advisory Database · CC BY 4.0
- CVE-2010-2793 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences