An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 12.6.1204.216CPE matchmatch criteria | cpe:2.3:a:ashlar:argon:*:*:*:*:*:*:*:* | ||
<= 12.6.1204.216CPE matchmatch criteria | cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:* | ||
<= 12.6.1204.216CPE matchmatch criteria | cpe:2.3:a:ashlar:cobalt_share:*:*:*:*:*:*:*:* | ||
<= 12.6.1204.216CPE matchmatch criteria | cpe:2.3:a:ashlar:lithium:*:*:*:*:*:*:*:* | ||
<= 12.6.1204.216CPE matchmatch criteria | cpe:2.3:a:ashlar:xenon:*:*:*:*:*:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.