CVE-2023-39943: Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Out-of-bounds Write
In Ashlar-Vellum Cobalt versions prior to v12 SP2 Build (1204.200), the affected application lacks proper validation of user-supplied data when parsing XE files. This could lead to an out-of-bounds write. An attacker could leverage this vulnerability to execute arbitrary code in the context of the current process.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-39943?
CVE-2023-39943 is considered to have a high severity due to the potential for arbitrary code execution.
How do I fix CVE-2023-39943?
To fix CVE-2023-39943, update Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, or Lithium to version 12 SP2 Build (1204.200) or later.
What are the affected products for CVE-2023-39943?
The affected products for CVE-2023-39943 include Ashlar-Vellum Cobalt, Cobalt Share, Graphite, Xenon, Argon, and Lithium versions prior to v12 SP2 Build (1204.200).
What type of attack can exploit CVE-2023-39943?
CVE-2023-39943 can be exploited by an attacker leveraging the vulnerability to perform an out-of-bounds write, potentially leading to arbitrary code execution.
When was CVE-2023-39943 published?
CVE-2023-39943 was published on an unspecified date in 2023, with details focusing on vulnerabilities in the Ashlar-Vellum software.