REDHAT-BUG-971172: High severity Spice Spice service for Windows vulnerability

Published Jun 5, 2013

Updated

An unquoted search path flaw was found in the way Spice service for Windows was installed into the system.

A local unprivileged user could use this flaw to increase their privileges.

References:

http://cwe.mitre.org/data/definitions/428.html

Affected Software

1 affected component

Spice Spice service for Windows

Event History

Jun 5, 2013

Data Sourced

via Red Hat·09:31 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-971172?

REDHAT-BUG-971172 has a high severity rating due to the potential for privilege escalation by unprivileged users.

How do I fix REDHAT-BUG-971172?

To fix REDHAT-BUG-971172, ensure that the Spice service for Windows is installed with a properly quoted search path.

What systems are affected by REDHAT-BUG-971172?

REDHAT-BUG-971172 affects installations of the Spice service for Windows.

Can remote users exploit REDHAT-BUG-971172?

No, REDHAT-BUG-971172 requires local access, allowing only unprivileged local users to exploit the vulnerability.

What is an unquoted search path vulnerability in REDHAT-BUG-971172?

An unquoted search path vulnerability occurs when a program's file path is not properly enclosed in quotes, potentially allowing malicious executables to be run.