A heap-based buffer overflow vulnerability exists in Ashlar-Vellum Cobalt's AR file parsing functionality. This flaw allows remote attackers to execute arbitrary code if a user opens a malicious file or visits a malicious page. Exploitation requires user interaction. The vulnerability arises from improper validation of user-supplied data length before copying it to a heap buffer.