Multiple vulnerabilities in Ashlar-Vellum Cobalt

1) Type Confusion

EUVDB-ID: #VU81067

Risk: Medium

CVSSv3.1:

CVE-ID: CVE-2023-42105

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a type confusion error within the parsing of AR files. A remote attacker can trick a victim to open a specially crafted file, trigger a type confusion error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

Cobalt: All versions

Fixed software versions

CPE2.3

• cpe:2.3:a:ashlar-vellum:cobalt:*:*:*:*:*:*:*:*

External links

http://www.zerodayinitiative.com/advisories/ZDI-23-1454/

Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?

2) Use-after-free

EUVDB-ID: #VU81071

Risk: High

CVSSv3.1:

CVE-ID: CVE-2023-42103

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the parsing of AR files. A remote attacker can trick a victim to open a specially crafted file and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

Cobalt: All versions

Fixed software versions

CPE2.3

• cpe:2.3:a:ashlar-vellum:cobalt:*:*:*:*:*:*:*:*

External links

http://www.zerodayinitiative.com/advisories/ZDI-23-1452/

Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?

3) Type Confusion

EUVDB-ID: #VU81070

Risk: High

CVSSv3.1:

CVE-ID: CVE-2023-42102

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a type confusion error within the parsing of AR files. A remote attacker can trick a victim to open a specially crafted file, trigger a type confusion error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

Cobalt: All versions

Fixed software versions

CPE2.3

• cpe:2.3:a:ashlar-vellum:cobalt:*:*:*:*:*:*:*:*

External links

http://www.zerodayinitiative.com/advisories/ZDI-23-1451/

Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?

4) Out-of-bounds write

EUVDB-ID: #VU81069

Risk: High

CVSSv3.1:

CVE-ID: CVE-2023-42101

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error within the parsing of AR files. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger an out-of-bounds write and execute arbitrary code on the target system.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

Cobalt: All versions

Fixed software versions

CPE2.3

• cpe:2.3:a:ashlar-vellum:cobalt:*:*:*:*:*:*:*:*

External links

http://www.zerodayinitiative.com/advisories/ZDI-23-1450/

Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?

5) Use-after-free

EUVDB-ID: #VU81068

Risk: High

CVSSv3.1:

CVE-ID: CVE-2023-42104

CWE-ID:

Exploit availability:

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the parsing of AR files. A remote attacker can trick a victim to open a specially crafted file and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

Cobalt: All versions

Fixed software versions

CPE2.3

• cpe:2.3:a:ashlar-vellum:cobalt:*:*:*:*:*:*:*:*

External links

http://www.zerodayinitiative.com/advisories/ZDI-23-1453/

Q & A

Can this vulnerability be exploited remotely?

How the attacker can exploit this vulnerability?

Is there known malware, which exploits this vulnerability?