Vulnerability Details : CVE-2007-3471

Buffer overflow in the dtsession Common Desktop Environment (CDE) Session Manager in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via unspecified vectors.

Vulnerability category: OverflowExecute code

Published 2007-06-28 18:30:00

Updated 2017-09-29 01:29:01

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-3471

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 11 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-3471

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	[email protected]
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-3471

Products affected by CVE-2007-3471

SUN » Solaris » Version: 9.0 Sparc Edition
cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 8.0 X86 Edition
cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 8.0 Sparc Edition
cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 9.0 X86 Edition
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 10.0 Sparc Edition
cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
Matching versions
SUN » Solaris » Version: 10.0 X86 Edition
cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
Matching versions