A stack-based buffer overflow vulnerability exists in Ashlar-Vellum Cobalt XE file parsing. This flaw allows remote attackers to execute arbitrary code if a user opens a crafted malicious file or visits a malicious page. The vulnerability arises from improper validation of user-supplied data length before copying to a stack buffer.