CVE-2011-0012: The SPICE Firefox plug-in (spice-xpi) 2.4, 2.3, 2.2, and possibly other versions allows local users to over...

Security readout for executives and security teams

CVE-2011-0012 is a local file overwrite issue in the SPICE Firefox plug-in, spice-xpi 2.4, 2.3, 2.2, and possibly other versions. A local user could abuse predictable usbrdrctl log file handling to overwrite files. It is not listed in CISA KEV, and the bundle provides no CVSS or active exploitation evidence. Exposure is likely limited to systems with the SPICE Firefox plug-in installed, especially Red Hat environments using affected spice-xpi versions. Internet-facing exposure is not indicated because the attacker must already be local. Treat this as a targeted hygiene issue, not an emergency. Prioritize affected shared workstations, virtualization admin systems, and multi-user Linux hosts where local users could turn file overwrite into operational disruption or privilege-impacting conditions. Mitigation focus: Inventory systems for spice-xpi and affected version ranges.; Apply Red Hat guidance from RHSA-2011:0426 where applicable.; Remove the plug-in where it is no longer required..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.