CVE-2022-43752 - Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability

Back Back to CVE browser

HIGH

Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability

Published Oct 31, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.33%

Description

Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (3)

http://phrack.org/issues/70/13.html#article
ExploitIssue TrackingTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46729
Advisory
https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.c
ExploitThird Party Advisory

Link	Providers	Tags
http://phrack.org/issues/70/13.html#article		ExploitIssue TrackingTechnical DescriptionThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46729		Advisory
https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.c		ExploitThird Party Advisory