4.6
CVE-2004-1398
- EPSS 0.41%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:07:37
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginFormat string vulnerability in prelink.c in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via format string specifiers in the extension argument.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.322 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|
http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html
http://marc.info/?l=bugtraq&m=110305083706943&w=2
http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt
http://www.securityfocus.com/bid/11926
http://www.securityfocus.com/bid/20031
https://exchange.xforce.ibmcloud.com/vulnerabilities/18472