CVE-2013-7388: Buffer Overflow
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-7388?
CVE-2013-7388 has been classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2013-7388?
To address CVE-2013-7388, users should upgrade to a version of Trimble SketchUp released after 2013, specifically version 13.0.3689 or later.
Which versions of SketchUp are affected by CVE-2013-7388?
CVE-2013-7388 affects Google SketchUp versions 6.0 through 8.0 as well as specific maintenance versions up to 8.0.
What type of attack does CVE-2013-7388 enable?
CVE-2013-7388 enables remote attackers to execute arbitrary code on affected systems through specially crafted RLE4-compressed bitmap files.
Is there a known exploit for CVE-2013-7388?
While there is no specific exploit publicized for CVE-2013-7388, the architecture of the vulnerability makes it highly susceptible to exploitation.