** UNSUPPORTED WHEN ASSIGNED ** Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon.
References
Link | Resource |
---|---|
http://phrack.org/issues/70/13.html#article | Exploit Issue Tracking Technical Description Third Party Advisory |
https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.c | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-10-31 14:15
Updated : 2022-11-07 07:53
NVD link : CVE-2022-43752
Mitre link : CVE-2022-43752
JSON object : View
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Products Affected
common_desktop_environment_project
- _common_desktop_environment
oracle
- solaris