Lucene search

K
cvelistRedhatCVELIST:CVE-2010-2792
HistoryAug 30, 2010 - 7:00 p.m.

CVE-2010-2792

2010-08-3019:00:00
redhat
www.cve.org
6

AI Score

5.6

Confidence

Low

EPSS

0

Percentile

5.1%

Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information, and conduct man-in-the-middle attacks, by providing a UNIX socket for communication between this plug-in and the client (aka qspice-client) in qspice 0.3.0, and then accessing this socket.

AI Score

5.6

Confidence

Low

EPSS

0

Percentile

5.1%