Description
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | spice-xpi | 2.2-2.3.el5_5 | RHSA-2010:0651 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Productivity 5 | spice-xpi | 2.2-2.3.el5_5 | RHSA-2010:0651 |
Advisories 1
- RHSA-2010:0651 Red Hat Security Advisory: spice-xpi security and bug fix update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- RHSA-2010:0651 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=620356
- 41120 third-party-advisory
- ADV-2010-2181 vdb-entry
- 67620 vdb-entry