Spice Gtk Project

CVE-2016-3066 Jun 06, 18:29 MEDIUM This Month

The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2013-4324 Oct 03, 21:55 MEDIUM This Month

spice-gtk 0.14, and possibly other versions, invokes the polkit authority using the insecure polkit_unix_process_new API function, which allows local users to bypass intended access restrictions by. Rated medium severity (CVSS 4.6), this vulnerability is low attack complexity. No vendor patch available.