CVE-2023-24040

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-01-21 · updated 2026-06-17
Weakness: CWE-74

Description

dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat (an invoked external command) during listing of the names of available printers. This allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This injection allows those users to manipulate the control flow and disclose memory contents on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Opengroup Common Desktop Environment: 1.6

References

http://seclists.org/fulldisclosure/2023/Jan/24
https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt
https://security.humanativaspa.it/nothing-new-under-the-sun/
http://seclists.org/fulldisclosure/2023/Jan/24
https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt
https://security.humanativaspa.it/nothing-new-under-the-sun/

Get alerted when CVE-2023-24040 or the next vulnerability affects your stack