Lucene search

K
cve[email protected]CVE-2011-2478
HistoryApr 17, 2012 - 6:55 p.m.

CVE-2011-2478

2012-04-1718:55:00
CWE-94
web.nvd.nist.gov
23
cve-2011-2478
google sketchup
code execution
remote attack
.skp file
security vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.2%

Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attackers to execute arbitrary code via a crafted file.

Affected configurations

NVD
Node
googlesketchupRange≀7.1maintenance_2
OR
googlesketchupMatch6.0maintenance_6
OR
googlesketchupMatch7.0maintenance_1
OR
googlesketchupMatch7.1
OR
googlesketchupMatch7.1maintenance_1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.2%