Out-of-bounds

Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662...

CVE-2013-3664

Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662...

CVE-2013-3662

Timbre SketchUp formerly Google SketchUp before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow...

CVE-2013-3662

CVE-2013-3662 affects Timbre SketchUp/Google SketchUp prior to 8 Maintenance 2. A crafted color palette table in a MAC Pict texture can trigger a stack-based buffer overflow, allowing remote arbitrary code execution. Impact is consistent with a high-severity, network-accessible vulnerability (as ...

CVE-2013-3664

CVE-2013-3664 affects Trimble SketchUp (formerly Google SketchUp) before version 13.0.3689. It permits remote code execution via a crafted color palette table in a MAC Pict texture, causing an out-of-bounds stack write. This CVE exists due to an incomplete fix for CVE-2013-3662 and was split from...

Apple QuickTime PICT PnSize Buffer Overflow

No description provided by source. $Id: applequicktimepnsize.rb 13691 2011-09-03 21:17:58Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

Apple Mac OS X 10.4.8 - QuickDraw GetSrcBits32ARGB Remote Memory Corruption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22207/info Mac OS X QuickDraw is prone to a remote memory-corruption vulnerability because the software fails to properly handle malformed PICT image files. Successfully exploiting this issue allows remote attackers to...

Apple QuickDraw PICT Images ARGB Records Handling Memory Corruption - Ver2 (CVE-2007-0462)

A memory corruption vulnerability has been reported in QuickDraw. The vulnerability is due to improper handling of PICT image files. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Office PICT Filter Map Structure Memory Corruption - Ver2 (CVE-2008-3021)

A memory corruption vulnerability has been reported in Microsoft Office. The vulnerability is due to a memory corruption error when a malformed PICT file is opened by any of the affected Microsoft Office applications. Successful exploitation of this vulnerability could allow a remote attacker to...

Apple Mac OS X Multiple Vulnerabilities - 02 (Jan 2014)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Trimble Navigation SketchUp PICT File Buffer Overflow - Improved Performance (CVE-2013-3664)

A remote code execution vulnerability has been reported in Trimble SketchUp. The vulnerability is due to a stack buffer overflow while processing PICT files which contain a malicious number of ARGB entries. A remote attacker can exploit this vulnerability by enticing a target user to open a...

Google SketchUp < 8.0.11752 MAC Pict Buffer Overflow

The version of Google SketchUp installed on the remote Windows host is earlier than 8.0.11752. As such, it reportedly is affected by a buffer overflow vulnerability. An error exists related to the handling of embedded MAC Pict textures that allows a stack-based buffer overflow, leading to...

Buffer overflow

Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image...

CVE-2013-0975

Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted PICT image...

CVE-2013-0975

Apple Mac OS X QuickDraw Manager is affected by a buffer overflow in handling PICT images, allowing remote code execution or application crash. The vulnerability exists in OS X versions before 10.8.4 and is triggered by a crafted PICT image. Apple addressed this in OS X 10.8.4 and Security Update...

Mac OS X 10.8 < 10.8.4 Multiple Vulnerabilities (Security Update 2013-002)

Binary data 6857.prm...

Sketchup multiple security vulnerabilities

Vulnerabilities on SKP, BMP, PICT parsing...

CVE-2013-3662 - Sketchup MAC Pict Material Palette Stack Corruption

If you are still using an old version of SketchUp8M2 you should upgrade it. Title: Sketchup MAC Pict Material Palette Stack Corruption Product: Google SketchUp Advisory ID: BINA-20111201 CVE ID: CVE-2013-3662 Class: Boundary Error Condition Buffer Overflow Vulnerability class: Client side/ file...

Multiple vulnerabilities on sketchup

SketchUp is a 3D modeling program marketed by Trimble Navigation Limitedpreviously Google and designed for architectural, civil, and mechanical engineers as well as filmmakers, game developers, and related professions. SketchUp fails to validate the input when parsing different types of embedded...

Apple Patches Nine Vulnerabilities in QuickTime 7.7.3 Update

Apple shipped fixes for nine vulnerabilities in its QuickTime multimedia platform. The QuickTime 7.7.3 update resolves bugs for Windows 7, Vista, and XP service pack 2 and later. The first two patches, discovered by IBM X-Force’s Mark Yason and Microsoft’s Jeremy brown respectively, resolve a...