CVE-2013-2152 Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecif...
HighCVSS 7.2
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise virtualization | = 3.2 | No fix listed |
References
- RHSA-2013:0924 vendor-advisory
- RHSA-2013:0925 vendor-advisory
- 60475 vdb-entry
- bugzilla.redhat.com
- enterprise-cve20132152-priv-esc(84866) vdb-entry