exploitDog

CVE-2013-2152

Опубликовано: 21 янв. 2014

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.

Комментарий

Per: http://cwe.mitre.org/data/definitions/426.html

"CWE-426: Untrusted Search Path"

Ссылки

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:enterprise_virtualization:3.2:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00414

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2013-2152

redhat

около 13 лет назад

Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.

GHSA-2r5w-8r8w-hxph

github

около 4 лет назад

Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.

EPSS

Процентиль: 34%

0.00414

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-Other