CVE-2004-1398

CVE-2004-1398 describes a format string vulnerability in the kextload component of Apple OS X, specifically within prelink.c, which is utilized by Roxio Toast Titanium and potentially other applications. This flaw allows local attackers to execute arbitrary code by injecting format string specifiers into the extension argument. With a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), this vulnerability has low attack complexity and requires local access, but can lead to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the CVE has garnered significant community discussion, indicating awareness and potential for future exploitation.