Opengroup Common Desktop Environment 1.6

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:opengroup:common_desktop_environment:1.6:*:*:*:*:*:*:*

part: a version: 1.6 update: *

VendorOpengroup (eb06419e-14dc-52b7-b0be-b28625bba11d)
ProductCommon Desktop Environment (31177e05-213c-55d5-a8a8-4352e04e79c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:sourceforge/cdesktopenv purl2cpe 2026-06-01 10:16:09.748604

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-24040 vulnerable 2026-06-08 05:56:05.102199 Details available
dtprintinfo in Common Desktop Environment 1.6 has a bug in the parser of lpstat (an invoked external command) during listing of the names of available printers. This allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file. This injection allows those users to manipulate the control flow and disclose memory contents on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2023-01-21T00:00:00.000Z
Updated: 2024-08-02T10:49:08.978Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24039 vulnerable 2026-06-08 05:56:05.101602 Details available
A stack-based buffer overflow in ParseColors in libXm in Common Desktop Environment 1.6 can be exploited by local low-privileged users via the dtprintinfo setuid binary to escalate their privileges to root on Solaris 10 systems. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2023-01-21T00:00:00.000Z
Updated: 2025-04-02T15:55:36.400Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.