Unrated severityNVD Advisory· Published Jan 21, 2023· Updated Apr 2, 2025

CVE-2023-24039

Description

A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via the dtprintinfo setuid binary to escalate their privileges to root on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Common Desktop Environment/Common Desktop Environmentdescription
Open Group/Cde Common Desktop Environmentllm-fuzzy
Range: = 1.6

Patches

Vulnerability mechanics

References

seclists.org/fulldisclosure/2023/Jan/24mitremailing-list
github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintlibXmas.cmitre
github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txtmitre
security.humanativaspa.it/nothing-new-under-the-sun/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000