26 matches found
spice-xpi: unitialized pointer writes possible when getting plugin properties
The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via vectors related to 1 plugin/nsScriptablePeer.cpp and 2 plugin/plugin.cpp, which trigger multiple uses of an uninitializ...
spice-xpi: symlink attack on usbrdrctl log file
The SPICE Firefox plug-in spice-xpi 2.4, 2.3, 2.2, and possibly other versions allows local users to overwrite arbitrary files via a symlink attack on the usbrdrctl log file, which has a predictable name...
PT-2011-1116
Name of the Vulnerable Software and Affected Versions spice-xpi versions 2.2 through 2.4 Description The issue affects the confidentiality, integrity, and availability of protected information. It can be exploited remotely, potentially leading to a denial of service crash and possibly the executi...
spice-xpi security update
2.4-1.el60.2 - Fix security vulnerability CVE-2011-0012 rhbz639869 Resolves: rhbz639870 2.4-1.el60.1 - Fix security vulnerability CVE-2011-1179 rhbz689931 Resolves: rhbz689932...
CentOS 5 : spice-xpi (CESA-2010:0651)
An updated spice-xpi package that fixes two security issues and three bugs is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severi...