PT-2012-1557

CVE-2011-2478

·

Published

2012-04-17

·

Updated

2012-04-18

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google SketchUp versions prior to 8
Description The issue arises from improper handling of edge geometry in SketchUp files, allowing remote attackers to execute arbitrary code via a crafted file.
Recommendations For Google SketchUp versions prior to 8, update to version 8 or later to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-94: Improper Control of Generation of Code (\'Code Injection\')
Related identifiers
CVE-2011-2478
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com