Ashlar-Vellum Cobalt Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in Ashlar-Vellum Cobalt, as well as in the Cobalt Share application, both prior to version 12 SP2 Build 1204.200. This vulnerability arises from the application's improper validation of user-supplied data when parsing CO files, which could allow an attacker to execute arbitrary code within the context of the current process.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to the latest version of Ashlar-Vellum Cobalt by installing v12 SP12 Alpha Build 1204.200, available on the Ashlar-Vellum website. For Graphite users, the latest version can be downloaded from the Graphite download page. CISA also recommends following general cybersecurity best practices to avoid social engineering attacks.