Lucene search

[email protected]CVE-2022-43752

HistoryOct 31, 2022 - 9:15 p.m.

CVE-2022-43752

2022-10-3121:15:13

CWE-120

[email protected]

web.nvd.nist.gov

oracle

solaris

version 10

1/13

cde

privilege escalation

vulnerability

cve-2022-43752

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0005 Low

EPSS

Percentile

17.9%

JSON

Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer’s icon.

Affected configurations

NVD

Node

oraclesolarisMatch10

AND

common_desktop_environment_project_common_desktop_environmentMatch-

CPENameOperatorVersion
common_desktop_environment_project:common_desktop_environmentcommon desktop environment project common desktop environmenteq-

CPE	Name	Operator	Version
common_desktop_environment_project:common_desktop_environment	common desktop environment project common desktop environment	eq	-

References

phrack.org/issues/70/13.html#article

github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.c

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0005 Low

EPSS

Percentile

17.9%

JSON

Related for CVE-2022-43752

prion1 nvd1 cnvd1 cvelist1