PT-2014-3412
CVE-2013-7388
·
تاريخ النشر
2014-07-01
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Trimble SketchUp versions prior to 13.0.3689
Description
A heap-based buffer overflow issue in paintlib allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP).
Recommendations
For versions prior to 13.0.3689, update to version 13.0.3689 or later to resolve the issue. As a temporary workaround, consider avoiding the use of RLE4-compressed bitmaps (BMP) in Trimble SketchUp until the update is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾