CVE:CVE-2010-2793
CNNVD:CNNVD-201012-096
Red Hat SPICE是Red Hat Enterprise Virtualization for Desktops产品的内核组件，专为虚拟环境设计的自适应远程呈现协议。
SPICE在实现上存在竞争条件漏洞，攻击者可利用此漏洞获取认证细节访问权限，对SPICE执行中间人攻击。
solution:Upgrade redhat spice-activex to a higher version than -; Upgrade redhat enterprise_virtualization_manager to a higher version than 2.2.3,2.1,2.2,and avoid the version (,2.2.3],2.1,2.2