Vendor archive

spice-gtk_project CVEs

Beta · best-effort

3 CVEs tagged to vendor spice-gtk_project — 1 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2017-12194

Published Mar 14, 2018

A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control of malicious spice-server, could use this flaw to crash the c…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2016-3066

Published Jun 6, 2017

The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-4324

Published Oct 3, 2013

spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended acce…

CVSS 4.6 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1