Vulnerability Intelligence Report
CVE-2010-2793
Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.
No Active Exploit Signals
CVSS Base Score
6.8
MEDIUM
EPSS Probability:1.04%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| redhat | spice-activex | all |
| redhat | enterprise_virtualization_manager | 2.1, 2.2 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.038%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Red Hat, Inc. · Vendor · USA |
| Reserved | 2010-07-22T00:00:00 |
| Published | 2010-12-08T17:00:00 |
| Last Updated | 2024-08-07T02:46:48 |
Community Chatter & Buzz