NVD

Id
39421  
Name
CVE-2013-3664  
Description
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-07-01  
Modified Date
2014-07-02  
Seq
2013-3664  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
201003 39421 CVE-2013-3664 20130531 CVE-2013-3664 - Sketchup Multiple Vulnerabilities  View
201004 39421 CVE-2013-3664 http://blog.binamuse.com/2013/05/multiple-vulnerabilities-on-sketchup.html  View
201005 39421 CVE-2013-3664 http://www.binamuse.com/advisories/BINA-20130521A.txt  View
201006 39421 CVE-2013-3664 60248  View
201007 39421 CVE-2013-3664 sketchup-cve20133664-bo(84723)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25032 JVNDB-2013-006607 Timbre SketchUp における任意のコードを実行される脆弱性 Timbre SketchUp (旧Google SketchUp) には、任意のコードを実行される脆弱性が存在します。 CVE-2013-3664 63606 CVE-2013-3664 39421 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006607.html 2013-05-21 2014-07-03 View