Approved changes feed: RSS · Atom

cpe:2.3:a:trimble:sketchup:*:maintenance_5:*:*:*:*:*:*

part: a version: * update: maintenance_5

VendorTrimble (382554c3-e8c7-5019-bc4f-26bba4351991)
ProductSketchup (3a593eb8-e68d-5b91-a45c-b011b88262a6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-7388 vulnerable 2026-06-03 14:33:35.671947 Details available
Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).
Published: 2014-07-01T17:00:00.000Z
Updated: 2024-08-06T18:09:16.240Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3664 vulnerable 2026-06-03 14:33:08.216236 Details available
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue.
Published: 2014-07-01T17:00:00.000Z
Updated: 2024-08-06T16:14:56.582Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.