Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of AR files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. . Was ZDI-CAN-20660.

N/A

释放后使用

Ashlar Incorporated Ashlar-Vellum Cobalt 安全漏洞

Ashlar Incorporated Ashlar-Vellum是Ashlar Incorporated公司的计算机辅助设计 (CAD) 和 3D 建模软件的开发平台。 Ashlar Incorporated Ashlar-Vellum Cobalt存在安全漏洞，该漏洞源于存在文件解析释放后重用远程代码执行漏洞，允许远程攻击者在受影响的安装上执行任意代码。

N/A

N/A