Oracle Systems Solaris Common Desktop Environment buffer overflow | CVE-2023-24039
NAME
__________
Oracle Systems Solaris Common Desktop Environment buffer overflow
Platforms Affected:
Oracle Solaris 10
Risk Level:
7.8
Exploitability:
Proof of Concept
Consequences:
Gain Privileges
DESCRIPTION
__________
Oracle Systems Solais is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by ParseColors in libXm when using the Common Desktop Environment (CDE). By using the dtprintinfo setuid binary, a local authenticated attacker could exploit this vulnerability to escalate their privileges to root on Solaris 10 systems.
CVSS 3.0 Information
__________
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Access Vector:
Local
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on Patreon using the button below
To keep up to date follow us on the below channels.
