NVD

Id
42106  
Name
CVE-2013-7388  
Description
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-07-01  
Modified Date
2014-07-02  
Seq
2013-7388  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212476 42106 CVE-2013-7388 http://blog.binamuse.com/2013/05/multiple-vulnerabilities-on-sketchup.html  View
212477 42106 CVE-2013-7388 http://www.binamuse.com/advisories/BINA-20130521B.txt  View
212478 42106 CVE-2013-7388 60248  View
212479 42106 CVE-2013-7388 sketchup-cve20133664-bo(84723)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25033 JVNDB-2013-006608 Timbre SketchUp で使用される paintlib におけるヒープベースのバッファオーバーフローの脆弱性 Timbre SketchUp (旧 Google SketchUp) で使用される paintlib には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-7388 67330 CVE-2013-7388 42106 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006608.html 2013-05-21 2014-07-03 View