CVE-2004-1398: Medium severity Roxio Toast vulnerability

Published Dec 31, 2004

Updated

Format string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument.

Affected Software

1 affected component

Roxio Toast

Event History

Dec 31, 2004

CVE Published

05:00 AM

Feb 12, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1398?

CVE-2004-1398 is considered to be of medium severity due to its potential to allow local users to execute arbitrary code.

How do I fix CVE-2004-1398?

To fix CVE-2004-1398, ensure that you have the latest version of the affected software, Roxio Toast, which may contain security patches.

Who is affected by CVE-2004-1398?

CVE-2004-1398 affects local users on systems running Apple OS X with the affected versions of Roxio Toast.

What type of vulnerability is CVE-2004-1398?

CVE-2004-1398 is a format string vulnerability that can lead to arbitrary code execution.

Can CVE-2004-1398 be exploited remotely?

CVE-2004-1398 cannot be exploited remotely; it requires local access to the affected system.