Lucene search
HistoryAug 30, 2010 - 8:00 p.m.
CVE-2010-2794
cve-2010-2794
spice
firefox
symlink attack
nvd
6.2 Medium
AI Score
Confidence
Low
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| redhat:spice-xpi | redhat spice-xpi | eq | 2.2 |
Related
veracode
veracode
Arbitrary Files Overwrite
2020-04-10 00:50:38
cvelist
cvelist
CVE-2010-2794
2010-08-30 19:00:00
prion
prion
Code injection
2010-08-30 20:00:00
nessus
nessus
RHEL 5 : qspice-client (RHSA-2010:0632)
2013-01-24 00:00:00
RHEL 5 : spice-xpi (RHSA-2010:0651)
2013-01-24 00:00:00
CentOS 5 : spice-xpi (CESA-2010:0651)
2010-08-26 00:00:00
centos
centos
spice security update
2010-08-25 18:05:31
redhat
redhat
(RHSA-2010:0651) Moderate: spice-xpi security and bug fix update
2010-08-25 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2370
2024-03-12 08:35:15
6.2 Medium
AI Score
Confidence
Low
3.3 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2010-2794