CVE-2013-3662
SketchUp < 8.0 - Remote Code Execution via MAC Pict Texture Color Palette Table
Title source: llmDescription
Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84720
Exploit x_refsource_misc
http://blog.binamuse.com/2013/05/multiple-vulnerabilities-on-sketchup.html
Exploit mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-06/0006.html
Scores
EPSS
0.3186
EPSS Percentile
98.1%
Details
CWE
CWE-119
Status
published
Products (2)
google/sketchup
8.0
google/sketchup
< 8.0
Published
Jul 01, 2014
Tracked Since
Feb 18, 2026