CVE-2010-0280

Vulnerability CVE-2010-0280 affects lib3ds (1.x) as used by Google SketchUp 7.x before 7.1 M2. Root cause: an array index error in lib3ds (mesh.c) can be triggered by crafted 3DS files, enabling remote memory corruption and potentially arbitrary code execution or DoS. Affected environments includ...

CVE-2010-0316

Google SketchUp before 7.1 M2 is affected by an integer overflow when parsing SKP/3DS data, causing heap memory corruption that can lead to a denial of service or arbitrary code execution. Affected product: Google SketchUp (Windows and possibly other platforms) with versions prior to 7.1 Maintena...