Vulnerability Description
Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Redhat | Enterprise Virtualization | 3.2 |
References
- http://rhn.redhat.com/errata/RHSA-2013-0924.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0925.htmlVendor Advisory
- http://www.securityfocus.com/bid/60475
- https://bugzilla.redhat.com/show_bug.cgi?id=971172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84866
- http://rhn.redhat.com/errata/RHSA-2013-0924.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-0925.htmlVendor Advisory
- http://www.securityfocus.com/bid/60475
- https://bugzilla.redhat.com/show_bug.cgi?id=971172
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84866
FAQ
What is CVE-2013-2152?
CVE-2013-2152 is a vulnerability with a CVSS score of 7.2 (HIGH). Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecif...
How severe is CVE-2013-2152?
CVE-2013-2152 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-2152?
Check the references section above for vendor advisories and patch information. Affected products include: Redhat Enterprise Virtualization.