CVE-2010-2794
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files...
CVE-2010-2794 is a low vulnerability (CVSS 3.3) in Redhat Spice-xpi, published August 30, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. No source names a fixed version.
- Severity
- 3.3 LowCVSS 2.0, NVD
- Exploit chance
- 0.31%EPSS, 24th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
spice-xpiRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.2-2.3.el5_5 | 0:2.2-2.3.el5_5 |
spice-xpi-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:2.2-2.3.el5_5 | 0:2.2-2.3.el5_5 |
spice-xpiRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs | before 0:2.2-2.3.el5_5 | 0:2.2-2.3.el5_5 |
spice-xpi-debuginfoRed Hat:rhel_productivity:5 From an advisory covering 2 CVEs | before 0:2.2-2.3.el5_5 | 0:2.2-2.3.el5_5 |
What each source reports
NVD Score used
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
- Record
CVE-2010-2794- CVSS 2.0
- 3.3 Low
AV:L/AC:M/Au:N/C:N/I:P/A:P - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE ListNo score
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
- Record
CVE-2010-2794- Updated
- 2026-11-02
EUVDEUVD-2010-2798No score
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
- Record
EUVD-2010-2798- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qrqx-8qh8-q9cqNo score
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files...
The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
- Record
GHSA-qrqx-8qh8-q9cq- Weakness
- CWE-59
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2010-0651.html
bugzilla.redhat.com/show_bug.cgi?id=620356
secunia.com/advisories/41120
vupen.com/english/advisories/2010/2181
osvdb.org/67620
nvd.nist.gov/vuln/detail/CVE-2010-2794
Show 11 moreShow less
github.com/advisories/GHSA-qrqx-8qh8-q9cq
access.redhat.com/errata/RHSA-2010:0651
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0651.json
cve.org/CVERecord?id=CVE-2010-2792