CVE-2024-9716 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2024-9716

CVE-2024-9716 affects Trimble SketchUp Viewer via a Use-After-Free in SKP file parsing. The flaw arises from not validating an object’s existence before performing operations, allowing an attacker to execute code in the affected process. Exploitation requires user interaction (visiting a maliciou...

CVE-2024-9716 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2024-9715 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2024-9715

CVE-2024-9715 involves Trimble SketchUp Viewer SKP file parsing where a Use-After-Free arises from not validating an object’s existence before performing operations, enabling remote code execution after user interaction (visiting a malicious page or opening a malicious file). Multiple trusted sou...

CVE-2024-9714 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2024-9714

This CVE concerns Trimble SketchUp Viewer. The SKP file parsing flaw allows Use-After-Free that enables Remote Code Execution. Impact is high (CVE mentions code execution in the current process; vector is LOCAL with user interaction required). The root cause is failure to validate object existenc...

CVE-2024-9713 Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the target must visi...

CVE-2024-9713

CVE-2024-9713: Trimble SketchUp Pro SKP file parsing use-after-free vulnerability that allows arbitrary code execution. The flaw stems from not validating the existence of an object prior to performing operations during SKP parsing, enabling an attacker to execute code in the current process. Exp...

CVE-2024-9712 Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-11507 IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability

IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2024-11508 IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability

IrfanView DXF File Parsing Type Confusion Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2024-11513 IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

IrfanView ECW File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-11516 IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

IrfanView JPM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2024-11517

CVE-2024-11517 concerns IrfanView JPM file parsing where a lack of input validation allows an out-of-bounds write, leading to remote code execution. The vulnerability requires user interaction (opening a malicious JPM file or visiting a crafted page) and is described as a write-past-end of an all...

CVE-2024-11519

The CVE-2024-11519 entry describes a memory corruption in IrfanView triggered by parsing RLE files. The flaw stems from insufficient validation of user-supplied data in RLE parsing, enabling an attacker to execute code in the context of the current process. The vulnerability is labeled as HIGH se...

CVE-2024-11519 IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView RLE File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...

CVE-2024-11524

IrfanView DXF File Parsing Memory Corruption vulnerability (CVE-2024-11524) affects IrfanView and stems from improper validation during DXF parsing, leading to memory corruption and remote code execution. Exploitation requires user interaction (the target must open a malicious file or visit a mal...

CVE-2024-11523

Affected software: IrfanView. Vulnerability: DXF file parsing memory corruption that can lead to remote code execution. Root cause: lack of proper validation of user-supplied data during DXF parsing, enabling memory corruption. Impact: arbitrary code execution in the context of the current proces...

CVE-2024-11538 IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability

IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page ...