Lucene search

K
cve[email protected]CVE-2013-3663
HistoryJun 13, 2014 - 2:55 p.m.

CVE-2013-3663

2014-06-1314:55:00
CWE-119
web.nvd.nist.gov
109
cve-2013-3663
buffer overflow
paintlib
trimble sketchup
google sketchup
rle8
bmp

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.698 Medium

EPSS

Percentile

98.0%

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.698 Medium

EPSS

Percentile

98.0%