CVE-2010-2793
spice activex/spicec named pipe races
Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.
CVSS 2.0 · 6.8 Medium
EPSS 1.0%
KEV · Not listed
Vendors
Products