CVE-2022-43752

2022-10-3121:15:13

CWE-120

[email protected]

web.nvd.nist.gov

oracle solaris

privilege escalation

common desktop environment

crafted printer

vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

17.8%

JSON

Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer’s icon.

Affected configurations

Nvd

Node

oraclesolarisMatch10

AND

common_desktop_environment_project_common_desktop_environmentMatch-

VendorProductVersionCPE
oraclesolaris10cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
common_desktop_environment_project_common_desktop_environment-cpe:2.3:a:common_desktop_environment_project:_common_desktop_environment:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	solaris	10	cpe:2.3:o:oracle:solaris:10:::::::*
common_desktop_environment_project	_common_desktop_environment	-	cpe:2.3:a:common_desktop_environment_project:_common_desktop_environment:-:::::::*