CVE-2013-3663
SketchUp < 8.0 - Remote Code Execution via Crafted RLE8 Compressed BMP
Title source: llmDescription
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.
References (3)
Core 3
Core References
Exploit mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2013-06/0007.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/84721
Exploit x_refsource_misc
http://blog.binamuse.com/2013/05/multiple-vulnerabilities-on-sketchup.html
Scores
EPSS
0.3186
EPSS Percentile
98.1%
Details
CWE
CWE-119
Status
published
Products (5)
google/sketchup
6.0 maintenance_6
google/sketchup
7.0 maintenance_1
google/sketchup
7.1 (3 CPE variants)
google/sketchup
8.0
google/sketchup
< 8.0
Published
Jun 13, 2014
Tracked Since
Feb 18, 2026