Ashlar-Vellum Products Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share, all versions prior to 12.6.1204.204. The vulnerability arises from the applications' inadequate validation of user-supplied data when processing VC6 files. This flaw could be exploited by an attacker to execute arbitrary code within the context of the current process.

Impact

Exploitation of this vulnerability could result in a heap-based buffer overflow, allowing for arbitrary code execution in the context of the affected process.