SB2023062022 - Multiple vulnerabilities in Ashlar-Vellum Cobalt

Security Bulletin ID SB2023062022

Severity

High

Patch available

NO

Number of vulnerabilities 18

Exploitation vector Remote access

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 18 secuirty vulnerabilities.

1) Out-of-bounds write (CVE-ID: CVE-2023-35716)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error within the parsing of AR files. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and execute arbitrary code on the target system.

2) Heap-based buffer overflow (CVE-ID: CVE-2023-34299)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the parsing of CO files. A remote attacker can trick a victim to open a specially crafted file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

3) Untrusted Pointer Dereference (CVE-ID: CVE-2023-34300)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to untrusted pointer dereference. A remote attacker can trick a victim to open a specially crafted XE file and execute arbitrary code on the target system.

4) Untrusted Pointer Dereference (CVE-ID: CVE-2023-34301)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to untrusted pointer dereference. A remote attacker can trick a victim to open a specially crafted CO file and execute arbitrary code on the target system.

5) Stack-based buffer overflow (CVE-ID: CVE-2023-34302)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the parsing of CO files. A remote unauthenticated attacker can trick a victim to open a specially crafted file, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

6) Out-of-bounds write (CVE-ID: CVE-2023-34303)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error within the parsing of VC6 files. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and execute arbitrary code on the target system.

7) Buffer overflow (CVE-ID: CVE-2023-34304)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the parsing of IGS files. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

8) Out-of-bounds write (CVE-ID: CVE-2023-34305)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error within the parsing of X_B or X_T files. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and execute arbitrary code on the target system.

9) Untrusted Pointer Dereference (CVE-ID: CVE-2023-34309)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to untrusted pointer dereference. A remote attacker can trick a victim to open a specially crafted CO file and execute arbitrary code on the target system.

10) Input validation error (CVE-ID: CVE-2023-34310)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to the lack of proper initialization of memory prior to accessing it. A remote attacker can trick a victim to open a specially crafted CO file and execute arbitrary code on the target system.

11) Untrusted Pointer Dereference (CVE-ID: CVE-2023-34311)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to untrusted pointer dereference. A remote attacker can trick a victim to open a specially crafted CO file and execute arbitrary code on the target system.

12) Heap-based buffer overflow (CVE-ID: CVE-2023-35709)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the parsing of CO files. A remote attacker can trick a victim to open a specially crafted file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

13) Stack-based buffer overflow (CVE-ID: CVE-2023-35710)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the parsing of CO files. A remote unauthenticated attacker can trick a victim to open a specially crafted file, trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

14) Untrusted Pointer Dereference (CVE-ID: CVE-2023-35711)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to untrusted pointer dereference. A remote attacker can trick a victim to open a specially crafted XE file and execute arbitrary code on the target system.

15) Input validation error (CVE-ID: CVE-2023-35712)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to the lack of proper initialization of memory prior to accessing it. A remote attacker can trick a victim to open a specially crafted XE file and execute arbitrary code on the target system.

16) Input validation error (CVE-ID: CVE-2023-35713)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to the lack of proper initialization of memory prior to accessing it. A remote attacker can trick a victim to open a specially crafted XE file and execute arbitrary code on the target system.

17) Out-of-bounds write (CVE-ID: CVE-2023-35714)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error within the parsing of IGS files. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and execute arbitrary code on the target system.

18) Input validation error (CVE-ID: CVE-2023-35715)

The vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to the lack of proper initialization of memory prior to accessing it. A remote attacker can trick a victim to open a specially crafted AR file and execute arbitrary code on the target system.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

SB2023062022 - Multiple vulnerabilities in Ashlar-Vellum Cobalt

Breakdown by Severity

Description

Remediation

References