Ashlar-Vellum Cobalt Buffer Overflow Vulnerability Leading to Remote Code Execution

A buffer overflow vulnerability has been identified in Ashlar-Vellum Cobalt within the CO file parsing component. This flaw allows remote attackers to execute arbitrary code on affected systems. The vulnerability arises from inadequate validation of user-supplied data lengths before copying them to a buffer, creating an opportunity for code execution in the context of the current process. Exploitation requires user interaction, such as opening a malicious file or visiting a harmful webpage.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.