CVE-2011-2478

CWE-94 — Code Injection3 documents3 sources
Severity
9.3CRITICAL
EPSS
1.8%
top 17.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Sketchup
Timeline
PublishedApr 17
Latest updateMay 17

Description

Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attackers to execute arbitrary code via a crafted file.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDgoogle/sketchup7.1+3

🔴Vulnerability Details

2
GHSA
GHSA-mxmj-qp4j-5948: Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka↗2022-05-17
▶
CVEList
CVE-2011-2478: Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka↗2012-04-17
▶
CVE-2011-2478 (CRITICAL CVSS 9.3) | Google SketchUp before 8 does not p | cvebase.io