CVE-2010-2793 – spice activex/spicec named pipe races

https://notcve.org/view.php?id=CVE-2010-2793

08 Dec 2010 — Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function. Condición de carrera en el plug-in SPICE (también conocido como spice-activex) para Internet Explorer en Red Hat Enterprise Virtualization (RHEV) Manage... • http://securitytracker.com/id?1024825 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •