CVE Feed

    Dashboard / CVE / CVE-2010-2793

    CVE-2010-2793

    Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.

    Published:Dec 6, 2010
    Last Modified:Apr 11, 2025
    EPS:Dec 8, 2010
    EPSS Score:0.00229
    CVSS Score:6.8

    Affected Products

    Vendor
    Redhat
    Product
    Enterprise Virtualization Manager
    Vendor
    Redhat
    Product
    Rhev Manager
    Vendor
    Redhat
    Product
    Spice-activex

    Exploits

    No exploit reference

    Related CVEs

    CVE-2018-1072 (CVSS 5) — ovirt-engine before version ovirt 4.2.2 is vulnerable to an information exposure through log files. When engin…
    CVE-2018-8897 (CVSS 7.8) — A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manua…
    CVE-2015-7544 (CVSS 9.1) — redhat-support-plugin-rhev in Red Hat Enterprise Virtualization Manager (aka RHEV Manager) before 3.6 allows r…
    CVE-2015-5293 (CVSS 5.9) — Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when …
    CVE-2015-0237 (CVSS 6.8) — Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 ignores the permission to deny snapshot creation…
    CVE-2015-0257 (CVSS 2.1) — Red Hat Enterprise Virtualization (RHEV) Manager before 3.5.1 uses weak permissions on the directories shared …
    CVE-2014-3573 (CVSS 6.5) — The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "i…
    CVE-2013-6434 (CVSS 4.3) — The remote-viewer in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.3, when using a native SPICE …
    CVE-2013-2144 (CVSS 5) — Red Hat Enterprise Virtualization Manager (RHEVM) before 3.2 does not properly check permissions for the targe…
    CVE-2013-0168 (CVSS 4) — The MoveDisk command in Red Hat Enterprise Virtualization Manager (RHEV-M) 3.1 and earlier does not properly c…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High