Google

Sketchup

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2016-2536

  • EPSS 0.63%
  • Published 22.02.2016 15:59:03
  • Last modified 12.04.2025 10:46:40

Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp.

9.3

CVE-2013-3662

Exploit
  • EPSS 15.91%
  • Published 01.07.2014 17:55:03
  • Last modified 12.04.2025 10:46:40

Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow.

9.3

CVE-2013-3664

Exploit
  • EPSS 19.91%
  • Published 01.07.2014 17:55:03
  • Last modified 12.04.2025 10:46:40

Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exis...

9.3

CVE-2013-7388

Exploit
  • EPSS 12.77%
  • Published 01.07.2014 17:55:03
  • Last modified 12.04.2025 10:46:40

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE...

9.3

CVE-2013-3663

Exploit
  • EPSS 15.91%
  • Published 13.06.2014 14:55:12
  • Last modified 12.04.2025 10:46:40

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.

9.3

CVE-2012-4894

  • EPSS 6.83%
  • Published 05.10.2012 10:51:16
  • Last modified 11.04.2025 00:51:21

Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SKP file.

9.3

CVE-2011-2478

  • EPSS 2.2%
  • Published 17.04.2012 18:55:00
  • Last modified 11.04.2025 00:51:21

Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attackers to execute arbitrary code via a crafted file.