CVE-2013-3664_BMP

Sketchup BMP Material RLE4 Heap Overflow - CVE-2013-3664 SketchUp non convalida l'input durante l'analisi di una texture compressa BMP RLE4 incorporata. L'esecuzione di codice arbitrario è dimostrata possibile dopo che una texture malevola, una miniatura o un'immagine di sfondo innesca un heap...

SUSE CVE-2016-3982

Off-by-one error in the bmprle4fread function in pngxrbmp.c in OptiPNG before 0.7.6 allows remote attackers to cause a denial of service out-of-bounds read or write access and crash or possibly execute arbitrary code via a crafted image file, which triggers a heap-based buffer overflow...

Multiple vulnerabilities on sketchup

SketchUp is a 3D modeling program marketed by Trimble Navigation Limitedpreviously Google and designed for architectural, civil, and mechanical engineers as well as filmmakers, game developers, and related professions. SketchUp fails to validate the input when parsing different types of embedded...