Ashlar-Vellum Cobalt XE File Parsing Integer Overflow Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Ashlar-Vellum Cobalt XE, stemming from an integer overflow in the parsing of XE files. This issue arises due to inadequate validation of user-supplied data, leading to the overflow before buffer allocation. As a result, attackers can execute arbitrary code in the context of the current process. Exploitation requires user interaction, such as visiting a malicious page or opening a harmful file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running in the context of the current process.

Remediation

The vendor has indicated that a fix will be available in the next update. In the meantime, users are advised to limit interactions with the product.