CVE-2007-3471

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-28 · updated 2026-06-16

Description

Buffer overflow in the dtsession Common Desktop Environment (CDE) Session Manager in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via unspecified vectors.

Affected products

Sun Solaris: 8.0, 9.0, 10.0

References

http://osvdb.org/36608
http://secunia.com/advisories/25876
http://secunia.com/advisories/26136
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102954-1
http://support.avaya.com/elmodocs2/security/ASA-2007-310.htm
http://www.securityfocus.com/bid/24687
http://www.vupen.com/english/advisories/2007/2369
https://exchange.xforce.ibmcloud.com/vulnerabilities/35127
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2015
http://osvdb.org/36608
http://secunia.com/advisories/25876
http://secunia.com/advisories/26136

Get alerted when CVE-2007-3471 or the next vulnerability affects your stack