Ashlar-Vellum Cobalt vulnerabilities

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required in that the target must visit a malicious page or open a malicious file.

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing XE files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read past the end of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing XE files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing XE files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read past the end of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read past the end of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to a memory corruption condition. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing LI files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing AR files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to an out-of-bounds write past the end of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing XE files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read before the start of an allocated data structure. Requires user interaction (visiting a malicious page or opening a malicious file).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing AR files. It results from lack of validation of user-supplied data, leading to an out-of-bounds write. Requires user interaction (opening a malicious file or visiting a malicious page).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing CO files. It results from lack of validation of user-supplied data, leading to a type confusion condition. Requires user interaction (opening a malicious file or visiting a malicious page).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing AR files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read. Requires user interaction (opening a malicious file or visiting a malicious page).

A vulnerability in Ashlar-Vellum Cobalt when parsing LI files is caused by a use-after-free condition. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing AR files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read. Requires user interaction (opening a malicious file or visiting a malicious page).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing VC6 files. It results from lack of validation of user-supplied data, leading to an out-of-bounds read. Requires user interaction (opening a malicious file or visiting a malicious page).

Remote code execution vulnerability in Ashlar-Vellum Cobalt when parsing VC6 files. It results from lack of validation of user-supplied data, leading to an out-of-bounds write. Requires user interaction (opening a malicious file or visiting a malicious page).

An out-of-bounds read vulnerability in Ashlar-Vellum Cobalt during AR file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in a read past the end of an allocated data structure.

An integer overflow vulnerability in Ashlar-Vellum Cobalt during VC6 file parsing allows remote code execution. User interaction is required — the target must open a malicious file or visit a malicious page. The flaw stems from lack of validation of user-supplied data, resulting in an integer overflow before allocating a buffer.

A vulnerability in Ashlar-Vellum Cobalt when parsing AR files is caused by use of an uninitialized variable. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Cobalt when parsing LI files is caused by an integer overflow. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.

A vulnerability in Ashlar-Vellum Cobalt when parsing LI files is caused by an out-of-bounds read. A remote attacker can execute arbitrary code if the user opens a malicious file or visits a malicious page.