CVE-2013-2151

Related Files

Red Hat Security Advisory 2013-0925-01

Posted Jun 11, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0925-01 - The rhev-guest-tools-iso package contains tools and drivers. These tools and drivers are required by supported Windows guest operating systems when installed as guests on Red Hat Enterprise Virtualization. An unquoted search path flaw was found in the way the Red Hat Enterprise Virtualization agent was installed on Windows. Depending on the permissions of the directories in the unquoted search path, a local, unprivileged user could use this flaw to have a binary of their choosing executed with SYSTEM privileges. An unquoted search path flaw was found in the way the SPICE service was installed on Windows. Depending on the permissions of the directories in the unquoted search path, a local, unprivileged user could use this flaw to have a binary of their choosing executed with SYSTEM privileges.

tags | advisory, local

systems | linux, redhat, windows

advisories | CVE-2013-2151, CVE-2013-2152

SHA-256 | 8d7db196110d9f06320c08dbe07475c7a4b5bfc348edcbc73086bfa0e0f4db04

Download | Favorite | View