CVE-2023-24040

dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat an invoked external command during listing of the names of available printers. This allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This injection allows those users t...

CVE-2023-24040

The CVE-2023-24040 issue affects Common Desktop Environment (CDE) 1.6, where a bug in dtprintinfo’s handling of the lpstat parser during the listing of available printers allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This input manipulation can ...