qspice-client: man-in-the-middle vulnerability
| Package(s): | qspice-client |
CVE #(s): | CVE-2010-2792
|
| Created: | August 25, 2010 |
Updated: | August 26, 2010 |
| Description: |
From the Red Hat advisory: A race condition was found in the way the SPICE Mozilla Firefox plug-in and
the SPICE client communicated. A local attacker could use this flaw to
trick the plug-in and the SPICE client into communicating over an
attacker-controlled socket, possibly gaining access to authentication
details, or resulting in a man-in-the-middle attack on the SPICE
connection. |
| Alerts: |
|
