CVE-2013-2152: Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualizati...

Security readout for executives and security teams

CVE-2013-2152 is a local privilege-escalation issue in the SPICE service used by Red Hat Enterprise Virtualization 3.2. A local user could abuse an unquoted Windows search path with a crafted application in an unspecified folder. The public bundle does not provide CVSS, detailed affected builds, or confirmed exploitation. Exposure is most likely limited to RHEV 3.2 environments using the affected SPICE service on Windows. The bundle does not identify other products, CPEs, or exact vulnerable component versions. Treat as a targeted legacy-platform risk. It is not internet-remote based on the bundle, but local privilege escalation can matter on shared, virtualized, or administrator-adjacent systems. Mitigation focus: Review Red Hat RHSA-2013:0924 and RHSA-2013:0925 for vendor remediation guidance.; Inventory RHEV 3.2 systems and SPICE service usage.; Prioritize vendor-supported updates over local path or permission workarounds..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.