Scientific Linux: CVE-2011-0012 Moderate: spice-xpi Security Update

Date: Fri, 8 Apr 2011 17:35:12 -0500
Reply-To: This email address is being protected from spambots. You need JavaScript enabled to view it.
Sender: Security Errata for Scientific Linux
 
From: Jason Harrington 
Organization: FNAL/CD/REX/SAG
Subject: Security ERRATA Moderate: spice-xpi on SL5.x,SL6.x i386/x86_64
Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it.
MIME-Version: 1.0

Synopsis: Moderate: spice-xpi security update
Issue date: 2011-04-07
CVE Names: CVE-2011-0012
 CVE-2011-1179

An uninitialized pointer use flaw was found in the SPICE Firefox plug-in.
If a user were tricked into visiting a malicious web page with Firefox
while the SPICE plug-in was enabled, it could cause Firefox to crash or,
possibly, execute arbitrary code with the privileges of the user running
Firefox. (CVE-2011-1179)

It was found that the SPICE Firefox plug-in used a predictable name for one
of its log files. A local attacker could use this flaw to conduct a
symbolic link attack, allowing them to overwrite arbitrary files accessible
to the user running Firefox. (CVE-2011-0012)

SL 5.x
 SRPMS:
 spice-xpi-2.2-2.3.el5_6.1.src.rpm

 i386:
 spice-xpi-2.2-2.3.el5_6.1.i386.rpm

 x86_64:
 spice-xpi-2.2-2.3.el5_6.1.x86_64.rpm

SL 6.x
 SRPMS:
 spice-xpi-2.4-1.el6_0.2.src.rpm

 i386:
 spice-xpi-2.4-1.el6_0.2.i686.rpm

 x86_64:
 spice-xpi-2.4-1.el6_0.2.x86_64.rpm

- Scientific Linux Development Team