CVE-2023-24040

dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat an invoked external command during listing of the names of available printers. This allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This injection allows those users t...

Common Desktop Environment 注入漏洞

Common Desktop Environment is a Unix and OpenVMS desktop environment for individual developers based on the Motif widget toolkit. A security vulnerability exists in Common Desktop Environment version 1.6. An attacker can exploit this vulnerability to inject arbitrary printer names via the...

PT-2023-19374 · Oracle · Solaris 10

Name of the Vulnerable Software and Affected Versions: Common Desktop Environment version 1.6 Description: The issue is related to a bug in the parser of lpstat, an external command invoked by dtprintinfo, which occurs during the listing of available printer names. This bug allows low-privileged...