Vulnerability in Microsoft Windows
CVE-2013-2231
Unquoted Windows search path vulnerability in the QEMU Guest Agent service for Red Hat Enterprise Linux Desktop 6, HPC Node 6, Server 6, Workstation 6, Desktop Supplementary 6, Server Supplementary 6, Supplementary AUS 6.4, Supplementary EUS 6.4.z, and Workstation Supplementary 6, when installing on Windows, allows local users to gain privileges via a crafted program in an unspecified folder.
EPSS: 0.004 (36.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows
- Redhat Enterprise_linux — versions 6.0
- Redhat Enterprise_linux_desktop_supplementary — versions 6.0
- Redhat Enterprise_linux_server_supplementary — versions 6.0, 6.4, 6.4.z
- Redhat Enterprise_linux_workstation_supplementary — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_MISC)