CVE-2013-2152 in Enterprise Virtualization

Riassunto

di MITRE

Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 19/02/2013
• Divulgazione: 21/01/2014
• Moderazione: accettato
• Voce: VDB-12072
• CPE: pronto
• CWE: CWE-426 (confermato)
• CVSS: 7.2 (NVD)
• EPSS: 0.00414
• KEV: no
• Attività: molto basso
• Settore: Hospital, Police, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-2152
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-2152
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-2152/