Описание
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed.
Ссылки
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 12.6.1204.216 (включая)Версия до 12.6.1204.216 (включая)Версия до 12.6.1204.216 (включая)Версия до 12.6.1204.216 (включая)Версия до 12.6.1204.216 (включая)
Одно из
cpe:2.3:a:ashlar:argon:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:cobalt:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:cobalt_share:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:lithium:*:*:*:*:*:*:*:*
cpe:2.3:a:ashlar:xenon:*:*:*:*:*:*:*:*
EPSS
Процентиль: 6%
0.00165
Низкий
7.8 High
CVSS3
Дефекты
CWE-125
Связанные уязвимости
CVSS3: 7.8
github
3 месяца назад
An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an attacker to disclose information or execute arbitrary code when a specially crafted VC6 file is being parsed.
EPSS
Процентиль: 6%
0.00165
Низкий
7.8 High
CVSS3
Дефекты
CWE-125