Ashlar-Vellum Cobalt Type Confusion Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Ashlar-Vellum Cobalt, specifically within the parsing of AR files. This issue arises from improper validation of user-supplied data, leading to a type confusion condition. Exploitation of this vulnerability requires user interaction, as the target must open a malicious file or visit a harmful webpage.

Impact

Exploitation of this vulnerability allows remote attackers to execute arbitrary code on the affected system, in the context of the current process.

Remediation

Given the nature of this vulnerability, the recommended mitigation strategy is to limit interactions with the product.