Google Sketchup vulnerabilities
6 known vulnerabilities affecting google/sketchup.
Total CVEs
6
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL6
Vulnerabilities
Page 1 of 1
CVE-2013-3664CRITICALCVSS 9.3v6.0v7.0+2 more2014-07-01
CVE-2013-3664 [CRITICAL] CWE-119 CVE-2013-3664: Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execu
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affecte
nvd
CVE-2013-3662CRITICALCVSS 9.3≤ 8.0v8.02014-07-01
CVE-2013-3662 [CRITICAL] CWE-119 CVE-2013-3662: Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute
Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow.
nvd
CVE-2013-7388CRITICALCVSS 9.3v6.0v7.0+2 more2014-07-01
CVE-2013-7388 [CRITICAL] CVE-2013-7388: Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) befor
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).
nvd
CVE-2013-3663CRITICALCVSS 9.3≤ 8.0v6.0+3 more2014-06-13
CVE-2013-3663 [CRITICAL] CWE-119 CVE-2013-3663: Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) befor
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.
nvd
CVE-2012-4894CRITICALCVSS 9.3≤ 8.0v6.0+3 more2012-10-05
CVE-2012-4894 [CRITICAL] CWE-119 CVE-2012-4894: Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to exec
Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SKP file.
nvd
CVE-2011-2478CRITICALCVSS 9.3≤ 7.1v6.0+2 more2012-04-17
CVE-2011-2478 [CRITICAL] CWE-94 CVE-2011-2478: Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which
Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attackers to execute arbitrary code via a crafted file.
nvd