Lucene search

K
kasperskyKaspersky LabKLA10181
HistoryJul 01, 2014 - 12:00 a.m.

KLA10181 ACE vulnerability in Sketchup

2014-07-0100:00:00
Kaspersky Lab
threats.kaspersky.com
9

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.611 Medium

EPSS

Percentile

97.7%

Detect date:

07/01/2014

Severity:

Critical

Description:

Multiple critical vulnerabilities have been found in Google SketchUp. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities

Affected products:

Sketchup versions 13.0.3688 and earlier

Solution:

Update to latest version

Impacts:

ACE

Related products:

Google SketchUp

CVE-IDS:

CVE-2013-36649.3Critical
CVE-2013-73889.3Critical

Exploitation:

Public exploits exist for this vulnerability.

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.611 Medium

EPSS

Percentile

97.7%