Description
Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are executed with raised privileges.
References
- 19955 vdb-entry
- 21867 third-party-advisory
- http://www.netragard.com/pdfs/research/ROXIO_RACE_NETRAGARD-20060624.txt
- ADV-2006-3608 vdb-entry