In Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share v12 SP0 Build (1204.77), the affected applications lack proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ashlar-vellum cobalt |
||
ashlar-vellum xenon |
||
ashlar-vellum argon |
||
ashlar-vellum lithium |
||
ashlar-vellum cobalt share |
||
ashlar cobalt |
||
ashlar graphite |
||
ashlar xenon |
||
ashlar argon |
||
ashlar lithium |
Vulmon