Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-7388
HistoryJul 01, 2014 - 5:55 p.m.

CVE-2013-7388

2014-07-0117:55:03
CWE-119
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.611 Medium

EPSS

Percentile

97.8%

JSON

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).

Affected configurations

NVD
Node
googlesketchupMatch6.0maintenance_6
OR
googlesketchupMatch7.0maintenance_1
OR
googlesketchupMatch7.1
OR
googlesketchupMatch7.1maintenance_1
OR
googlesketchupMatch7.1maintenance_2
OR
googlesketchupMatch8.0
OR
googlesketchupMatch8.0maintenance_1
OR
googlesketchupMatch8.0maintenance_2
OR
googlesketchupMatch8.0maintenance_3
OR
googlesketchupMatch8.0maintenance_4
OR
trimblesketchupRange≤8.0maintenance_5

Related

prion 2
cve 2
kaspersky 1
nessus 1
cvelist 2
nvd 1
checkpoint_advisories 2
securityvulns 2
binamuse 1
prion
prion
Heap overflow
2014-07-01 17:55:00
Out-of-bounds
2014-07-01 17:55:00
cve
cve
CVE-2013-7388
2014-07-01 17:55:03
CVE-2013-3664
2014-07-01 17:55:03
kaspersky
kaspersky
KLA10181 ACE vulnerability in Sketchup
2014-07-01 00:00:00
nessus
nessus
Google SketchUp < 13.0.3689 SKP Multiple Vulnerabilities
2013-06-19 00:00:00
cvelist
cvelist
CVE-2013-7388
2014-07-01 17:00:00
CVE-2013-3664
2014-07-01 17:00:00
nvd
nvd
CVE-2013-3664
2014-07-01 17:55:03
checkpoint_advisories
checkpoint_advisories
Trimble Navigation SketchUp PICT File Buffer Overflow - Improved Performance (CVE-2013-3664)
2013-07-23 00:00:00
Trimble Navigation SketchUp BMP File Buffer Overflow (CVE-2013-3664)
2013-09-22 00:00:00
securityvulns
securityvulns
CVE-2013-3664 - Sketchup Multiple Vulnerabilities
2013-06-03 00:00:00
Sketchup multiple security vulnerabilities
2013-06-03 00:00:00
binamuse
binamuse
Multiple vulnerabilities on sketchup
2013-05-31 14:36:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.611 Medium

EPSS

Percentile

97.8%

JSON
Related for NVD:CVE-2013-7388
prion2cve2kaspersky1nessus1cvelist2nvd1checkpoint_advisories2securityvulns2binamuse1