Remote Code Execution Vulnerability in Ashlar-Vellum Argon

CVE-2023-44438

Summary

A vulnerability exists in Ashlar-Vellum Argon due to an improper search path element that can be exploited by remote attackers. The flaw lies within the parsing mechanism of various file types, where the application loads a library from an unsecured location. This compromise allows an attacker to run arbitrary code within the context of the current process, contingent upon user interaction to activate the exploit through visiting a malicious webpage or opening an infected file.

References