CVE-2013-2231

2013-10-0117:55:03

CWE-399

[email protected]

web.nvd.nist.gov

cve-2013-2231

qemu

red hat enterprise linux

windows

vulnerability

local privilege escalation

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.

Affected configurations

NVD

Node

redhatenterprise_linuxMatch6.0

redhatenterprise_linux_desktop_supplementaryMatch6.0

redhatenterprise_linux_server_supplementaryMatch6.0

redhatenterprise_linux_server_supplementaryMatch6.4

redhatenterprise_linux_server_supplementaryMatch6.4.z

redhatenterprise_linux_workstation_supplementaryMatch6.0

AND

microsoftwindows

CPENameOperatorVersion
redhat:enterprise_linuxredhat enterprise linuxeq6.0
redhat:enterprise_linux_desktop_supplementaryredhat enterprise linux desktop supplementaryeq6.0
redhat:enterprise_linux_server_supplementaryredhat enterprise linux server supplementaryeq6.0
redhat:enterprise_linux_server_supplementaryredhat enterprise linux server supplementaryeq6.4
redhat:enterprise_linux_server_supplementaryredhat enterprise linux server supplementaryeq6.4.z
redhat:enterprise_linux_workstation_supplementaryredhat enterprise linux workstation supplementaryeq6.0

CPE	Name	Operator	Version
redhat:enterprise_linux	redhat enterprise linux	eq	6.0
redhat:enterprise_linux_desktop_supplementary	redhat enterprise linux desktop supplementary	eq	6.0
redhat:enterprise_linux_server_supplementary	redhat enterprise linux server supplementary	eq	6.0
redhat:enterprise_linux_server_supplementary	redhat enterprise linux server supplementary	eq	6.4
redhat:enterprise_linux_server_supplementary	redhat enterprise linux server supplementary	eq	6.4.z
redhat:enterprise_linux_workstation_supplementary	redhat enterprise linux workstation supplementary	eq	6.0