CVE-2013-3664

Published Jul 1, 2014

Last updated 7 years ago

Overview

Description: Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:google:sketchup:6.0:maintenance_6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1D0ECBF9-81D6-46E5-B562-2B211759120C"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:7.0:maintenance_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B418AD1B-67D0-48A1-BADF-6DF7375F28CB"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:7.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "23ECF522-3F9A-4514-AC7E-95C81068E4F3"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:7.1:maintenance_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1D6AE8EF-BE0E-404C-B134-CD36B6A63828"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:7.1:maintenance_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A0DFA736-4D8B-453C-8652-0104985CB9D1"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:8.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C7465758-9BF5-4529-91A4-F442C4D1CC6F"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:8.0:maintenance_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1EBE1ED0-CC18-45AE-8761-3E0B304A18C2"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:8.0:maintenance_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C4860803-6E0F-448B-981C-4A2531F7455C"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:8.0:maintenance_3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F2DB039C-B6A2-44C0-84FF-BDDAEDFEF906"
          },
          {
            "criteria": "cpe:2.3:a:google:sketchup:8.0:maintenance_4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "739B944B-51C0-460B-B82B-189F04A3BD87"
          },
          {
            "criteria": "cpe:2.3:a:trimble:sketchup:*:maintenance_5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "89A70422-04F4-4358-8B2F-860045AFE586",
            "versionEndIncluding": "8.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Configurations

References