PT-2014-3412
CVE-2013-7388
·
Publicado
2014-07-01
·
Atualizado
2017-08-29
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Trimble SketchUp versions prior to 13.0.3689
Description
A heap-based buffer overflow issue in paintlib allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP).
Recommendations
For versions prior to 13.0.3689, update to version 13.0.3689 or later to resolve the issue. As a temporary workaround, consider avoiding the use of RLE4-compressed bitmaps (BMP) in Trimble SketchUp until the update is applied.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾