CVE-2010-2794: Red Hat Spice-Xpi

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.

Affected products

• Red Hat Spice-Xpi: version 2.2 only

Published 2010-08-30. Last modified 2026-06-16.