CVE-2022-43752

Oracle Solaris version 10 1/13, when using the Common Desktop Environment (CDE), is vulnerable to a privilege escalation vulnerability. A low privileged user can escalate to root by crafting a malicious printer and double clicking on the the crafted printer's icon.

• CWE-120
• CWE-120

• http://phrack.org/issues/70/13.html#articleExploit, Issue Tracking, Technical Description, Third Party Advisory
• https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.cExploit, Third Party Advisory
• http://phrack.org/issues/70/13.html#articleExploit, Issue Tracking, Technical Description, Third Party Advisory
• https://github.com/0xdea/exploits/blob/master/solaris/raptor_dtprintcheckdir_intel.cExploit, Third Party Advisory

Published

Oct 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-43747baramundi Management Agent (bMA) in baramundi Management Sui…9.8
• CVE-2022-43748Improper limitation of a pathname to a restricted directory …7.5
• CVE-2022-43749Improper privilege management vulnerability in summary repor…8.8
• CVE-2022-4375A vulnerability was found in Mingsoft MCMS up to 5.2.9. It h…9.8
• CVE-2022-43750drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel befo…6.7
• CVE-2022-43751McAfee Total Protection prior to version 16.0.49 contains an…7.8
• CVE-2022-43753A Improper Limitation of a Pathname to a Restricted Director…4.3
• CVE-2022-43754An Improper Neutralization of Input During Web Page Generati…5.4
• CVE-2022-43755A Insufficient Entropy vulnerability in SUSE Rancher allows …9.8
• CVE-2022-43756A Improper Neutralization of Special Elements in Output Used…7.5
• CVE-2022-43757A Cleartext Storage of Sensitive Information vulnerability i…8.8
• CVE-2022-43758A Improper Neutralization of Special Elements used in an OS …6.8