Ashlar-Vellum Products Heap-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A heap-based buffer overflow vulnerability has been identified in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share, all versions prior to 12.6.1204.204. The vulnerability arises because these applications do not properly validate user-supplied data when parsing XE files. This lack of validation could allow an attacker to execute arbitrary code within the context of the current process.

Impact

Exploitation of this vulnerability could lead to a heap-based buffer overflow, allowing for arbitrary code execution in the context of the affected process.