CVE-2022-43752

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-10-31 · updated 2026-06-17
Weakness: CWE-120

Description

Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon.

Affected products

Common Desktop Environment Project Common Desktop Environment: all versions

References

http://phrack.org/issues/70/13.html#article
https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.c
http://phrack.org/issues/70/13.html#article
https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.c

Get alerted when CVE-2022-43752 or the next vulnerability affects your stack