Skip to content
OpenAdvisories
Unscored RHSA-2010:0651 2 CVEs

Red Hat Security Advisory: spice-xpi security and bug fix update

Published Sep 15, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client spice-xpi 0:2.2-2.3.el5_5
Red Hat · RHEL 5 enterprise_linux:5::client spice-xpi-debuginfo 0:2.2-2.3.el5_5
Red Hat · Rhel Productivity 5 rhel_productivity:5 spice-xpi 0:2.2-2.3.el5_5
Red Hat · Rhel Productivity 5 rhel_productivity:5 spice-xpi-debuginfo 0:2.2-2.3.el5_5

Vulnerabilities 2

  • Unscored —
    CVE-2010-2792

    Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information,…

  • Unscored —
    CVE-2010-2794

    The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack …

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=618244
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=620350
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=620356
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0651.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-2792
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2792
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2792
  • report
    https://access.redhat.com/security/cve/CVE-2010-2794
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2794
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2794