High severity7.8NVD Advisory· Published Jan 21, 2023· Updated Jun 17, 2026
CVE-2023-24039
CVE-2023-24039
Description
A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via the dtprintinfo setuid binary to escalate their privileges to root on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:opengroup:common_desktop_environment:1.6:*:*:*:*:*:*:*
- Common Desktop Environment/Common Desktop Environmentdescription
- Range: 1.6
Patches
Vulnerability mechanics
References
4- security.humanativaspa.it/nothing-new-under-the-sun/nvdExploitThird Party Advisory
- seclists.org/fulldisclosure/2023/Jan/24nvdMailing ListThird Party Advisory
- github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintlibXmas.cnvdThird Party Advisory
- github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txtnvdThird Party Advisory
News mentions
0No linked articles in our index yet.