CVEvulnerability
CVE-2013-2231
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-10-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.
Affected configurations
• redhat enterprise linux 6.0
• redhat enterprise linux desktop supplementary 6.0
• redhat enterprise linux server supplementary 6.0
• redhat enterprise linux server supplementary 6.4
• redhat enterprise linux server supplementary 6.4.z
• redhat enterprise linux workstation supplementary 6.0
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2013-1100.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1101.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=980757 bugzilla.redhat.com
- http://rhn.redhat.com/errata/RHSA-2013-1100.html Vendor Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1101.html Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=980757 bugzilla.redhat.com