CVE-2022-43752

** UNSUPPORTED WHEN ASSIGNED ** Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon.
References
Link Resource
http://phrack.org/issues/70/13.html#article Exploit Issue Tracking Technical Description Third Party Advisory
https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.c Exploit Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:common_desktop_environment_project:_common_desktop_environment:-:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*

Information

Published : 2022-10-31 14:15

Updated : 2022-11-07 07:53


NVD link : CVE-2022-43752

Mitre link : CVE-2022-43752


JSON object : View

CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Advertisement

dedicated server usa

Products Affected

common_desktop_environment_project

  • _common_desktop_environment

oracle

  • solaris