CVE-2013-3663: Buffer Overflow
Published Jun 13, 2014
·Updated
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.
Affected Software
7 affected components
Google SketchUp<=8.0
Google SketchUp=6.0-maintenance_6
Google SketchUp=7.0-maintenance_1
Google SketchUp=7.1
Google SketchUp=7.1-maintenance_1
Google SketchUp=7.1-maintenance_2
Google SketchUp=8.0
Event History
Jun 13, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-3663?
CVE-2013-3663 is considered a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2013-3663?
To mitigate CVE-2013-3663, users should update to the latest version of Google SketchUp that addresses this vulnerability.
3
Who is affected by CVE-2013-3663?
CVE-2013-3663 affects users of Google SketchUp versions 6.0, 7.0, 7.1, and 8.0 before Maintenance 3.
4
What type of vulnerability is CVE-2013-3663?
CVE-2013-3663 is classified as a heap-based buffer overflow vulnerability.
5
Can CVE-2013-3663 be exploited remotely?
Yes, CVE-2013-3663 can be exploited remotely through crafted RLE8 compressed BMP files.