CVE-2013-7388

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689, allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap BMP. NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and...

CVE-2013-3664

CVE-2013-3664 affects Trimble SketchUp (formerly Google SketchUp) before version 13.0.3689. It permits remote code execution via a crafted color palette table in a MAC Pict texture, causing an out-of-bounds stack write. This CVE exists due to an incomplete fix for CVE-2013-3662 and was split from...

CVE-2013-3664

Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662...

CVE-2013-7388: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689, allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap BMP. NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and...

PT-2014-2696

Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662...

CVE-2013-3664: Improper Restriction of Operations within the Bounds of a Memory Buffer

Trimble SketchUp formerly Google SketchUp before 2013 13.0.3689 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662...

PT-2014-3412

Name of the Vulnerable Software and Affected Versions Trimble SketchUp versions prior to 13.0.3689 Description A heap-based buffer overflow issue in paintlib allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap BMP. Recommendations For versions prior to 13.0.3689...

CVE-2013-3663

SketchUp before 8 Maintenance 3 is affected by CVE-2013-3663 (BMP RLE8 Heap Overflow) due to a heap overflow in the BMP RLE8 decoding path borrowed from paintlib. The vulnerability allows remote code execution by parsing a crafted BMP texture embedded in a SKP file; the issue is fixed in 8M3 (and...

CVE-2013-3663: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp formerly Google SketchUp before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP...

PT-2014-2695

Name of the Vulnerable Software and Affected Versions Trimble SketchUp versions prior to 8 Maintenance 3 Description A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP. Recommendations For versions prior to 8 Maintenanc...

Trimble Navigation SketchUp BMP File Code Execution - Ver2 (CVE-2013-3663)

A remote code execution vulnerability exists in Trimble Navigation's SketchUp. The vulnerability is due to a heap buffer overflow while processing BMP files which contain malicious RLE data. Remote unauthenticated attackers can exploit this vulnerability by enticing a target user to open a...

CVE-2013-6038

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file...

CVE-2013-6038

CVE-2013-6038 : A stack-based buffer overflow in SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code by opening a specially crafted .SKP file. The issue is triggered during parsing of the .SKP, enabling potentially remote code execution without user interaction. The CVSS m...

CVE-2013-6038: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file...

PT-2013-5934

Name of the Vulnerable Software and Affected Versions Trimble SketchUp Viewer version 13.0.4124 Description A stack-based buffer overflow issue allows remote attackers to execute arbitrary code via a crafted .SKP file. Recommendations For Trimble SketchUp Viewer version 13.0.4124, update to a new...

Trimble Navigation SketchUp BMP File Code Execution (CVE-2013-3663)

A remote code execution vulnerability has been reported in Trimble Navigation's SketchUp...

Trimble Navigation SketchUp BMP File Buffer Overflow (CVE-2013-3664)

A remote code execution vulnerability exists in Trimble Navigation's Sketchup...

Trimble Navigation SketchUp PICT File Buffer Overflow - Improved Performance (CVE-2013-3664)

A remote code execution vulnerability has been reported in Trimble SketchUp. The vulnerability is due to a stack buffer overflow while processing PICT files which contain a malicious number of ARGB entries. A remote attacker can exploit this vulnerability by enticing a target user to open a...

Google SketchUp < 13.0.3689 SKP Multiple Vulnerabilities

The version of Google SketchUp installed on the remote Windows host is earlier than 13.0.3689. As such, it reportedly is affected by multiple buffer overflows related to the handling of '.SKP' files. Specially crafted files containing BMP RLE4 compressed textures or MAC Pict textures can cause th...

CVE-2012-5053

Cross-site scripting XSS vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...