CVE-2024-9712

Summary: CVE-2024-9712 affects Trimble SketchUp via the SKP file parsing path, leading to a use-after-free that enables remote code execution. Affected component: SketchUp SKP parser (parsing of SKP files). Root cause (as stated): The vulnerability arises from not validating the existence of an o...

CVE-2024-9712 Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a...

Trimble SketchUp 资源管理错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a Resource Management Error vulnerability that stems from SKP file parsing containing a post-release reuse issu...

Trimble SketchUp 资源管理错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a Resource Management Error vulnerability that stems from SKP file parsing containing a post-release reuse issu...

Trimble SketchUp 缓冲区错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a buffer error vulnerability that stems from SKP file parsing containing a memory corruption issue. An attacker...

Trimble SketchUp 资源管理错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a Resource Management Error vulnerability that stems from SKP file parsing containing a post-release reuse issu...

Trimble SketchUp 缓冲区错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a buffer error vulnerability that stems from SKP file parsing containing a memory corruption issue. An attacker...

Trimble SketchUp 资源管理错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a Resource Management Error vulnerability that stems from SKP file parsing containing a post-release reuse issu...

Trimble SketchUp 资源管理错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a Resource Management Error vulnerability that stems from SKP file parsing containing a post-release reuse issu...

Trimble SketchUp 缓冲区错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a buffer error vulnerability that stems from SKP file parsing containing an out-of-bounds read issue. An attack...

Trimble SketchUp 安全漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a security vulnerability that stems from SKP file parsing containing a post-release reuse issue. An attacker...

Trimble SketchUp 资源管理错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a Resource Management Error vulnerability that stems from SKP file parsing containing a post-release reuse issu...

Trimble SketchUp 缓冲区错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a buffer error vulnerability that originates from an out-of-bounds read during the parsing of a PSD file embedd...

Trimble SketchUp 缓冲区错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a buffer error vulnerability that stems from SKP file parsing containing an out-of-bounds read issue. An attack...

Trimble SketchUp 安全漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. A security vulnerability exists in Trimble SketchUp that stems from a buffer overflow during SKP file parsing, which could lead to remote cod...

Trimble SketchUp 安全漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a security vulnerability that stems from an issue with SKP file parsing containing an uninitialized variable. A...

Trimble SketchUp 资源管理错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a Resource Management Error vulnerability that stems from SKP file parsing containing a post-release reuse issu...

Trimble SketchUp 资源管理错误漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a Resource Management Error vulnerability that stems from SKP file parsing containing a post-release reuse issu...

Trimble SketchUp 安全漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a security vulnerability that stems from a stack-based buffer overflow issue contained in SKP file parsing. An...

(0Day) Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...