CVE-2004-1398

Published Dec 31, 2004

Last updated 8 years ago

Overview

Description: Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.6
Impact score: 6.4
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:roxio:toast:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6BC8D36C-2E66-45FB-8AB0-8D5FD6413E43"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References