MiracleLinux 4 : spice-gtk-0.11-11.AXS4.1 (AXSA:2012-921:03)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-921:03 advisory. Client libraries for SPICE desktop servers. Security issues fixed with this release: CVE-2012-4425 libgio, when used in setuid or other privileged programs in...

SUSE CVE-2012-4425

libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: it could be argued that this is a vulnerability in the applications that do...