CVE-2004-1398

Published: Dec 31, 2004Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument.

Affected (1)

Products: Roxio: Toast

Roxio

1 product

Toast

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Roxio Toast	All versions

References (12)

http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=110305083706943&w=2

Source: cve@mitre.org

http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt

Source: cve@mitre.org

http://www.securityfocus.com/bid/11926

Source: cve@mitre.org

http://www.securityfocus.com/bid/20031

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18472

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html