CVE-2013-3662: Buffer Overflow
Published Jul 1, 2014
·Updated
Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow.
Affected Software
2 affected components
Google SketchUp<=8.0
Google SketchUp=8.0
Event History
Jul 1, 2014
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-3662?
CVE-2013-3662 has a high severity due to the potential for remote code execution through a stack-based buffer overflow.
2
How do I fix CVE-2013-3662?
To fix CVE-2013-3662, upgrade to Timbre SketchUp version 8 Maintenance 2 or later.
3
Who is affected by CVE-2013-3662?
CVE-2013-3662 affects users of Timbre SketchUp versions prior to 8 Maintenance 2.
4
What type of vulnerability is CVE-2013-3662?
CVE-2013-3662 is a remote code execution vulnerability caused by a stack-based buffer overflow.
5
Can CVE-2013-3662 be exploited remotely?
Yes, CVE-2013-3662 can be exploited remotely if a crafted MAC Pict texture is used.