Roxio Toast TDIXSupport Local Format String Vulnerability

Bugtraq ID:	11926
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 14 2004 12:00AM
Updated:	Dec 14 2004 12:00AM
Credit:	fintler <[email protected]> is credited with the discovery of this issue.
Vulnerable:	Roxio Toast 6.0 Titanium
Not Vulnerable:

Roxio Toast TDIXSupport Local Format String Vulnerability

A local format string vulnerability reportedly affects the TDIXSupport utility of Roxio Toast. This issue is due to a failure of the application to securely implement a formatted printing function.

A local attacker may leverage this issue to execute arbitrary code on the affected computer with superuser privileges, facilitating privilege escalation.

Roxio Toast TDIXSupport Local Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Roxio Toast TDIXSupport Local Format String Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Roxio Toast TDIXSupport Local Format String Vulnerability

References:

• Toast Titanium Home Page (Roxio)
  
• Possible local root vulnerability in Roxio Toast on Mac OS X (fintler )