CVE-2016-2536

HIGH

SAP 3D Visual Enterprise Viewer - Remote Code Execution via Crafted SketchUp Document

Title source: llm
STIX 2.1

Description

Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp.

References (5)

Core 5
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-175
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/83307
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-174
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-176
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-16-173

Scores

CVSS v3 8.8
EPSS 0.0085
EPSS Percentile 75.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-399
Status published
Products (2)
google/sketchup
sap/3d_visual_enterprise_viewer
Published Feb 22, 2016
Tracked Since Feb 18, 2026