Back to search
CVE-2013-3664
Published: Jul 1, 2014
Modified: Aug 6, 2024
PUBLISHED
Description
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20130531 CVE-2013-3664 - Sketchup Multiple Vulnerabilities
mailing-list
x_refsource_BUGTRAQ
http://www.binamuse.com/advisories/BINA-20130521A.txt
x_refsource_MISC
sketchup-cve20133664-bo(84723)
vdb-entry
x_refsource_XF
60248
vdb-entry
x_refsource_BID
53635
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now