Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.
Metrics
Affected Vendors & Products
References
History
Tue, 27 Aug 2024 16:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Redhat rhev Manager
|
|
CPEs | cpe:/a:redhat:rhev_manager:2 | |
Vendors & Products |
Redhat rhev Manager
|
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2010-12-08T17:00:00Z
Updated: 2024-08-07T02:46:48.219Z
Reserved: 2010-07-22T00:00:00Z
Link: CVE-2010-2793
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-12-08T18:00:03.887
Modified: 2024-11-21T01:17:23.313
Link: CVE-2010-2793
Redhat