Approved changes feed: RSS · Atom

cpe:2.3:a:trimble:sketchup_viewer:22.0.316.0:*:*:*:*:*:*:*

part: a version: 22.0.316.0 update: *

VendorTrimble (382554c3-e8c7-5019-bc4f-26bba4351991)
ProductSketchup Viewer (65f66c4f-b38a-50b0-b224-a4e61d61d9dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-9731 vulnerable 2026-06-08 07:00:28.598604 Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability
HIGH (7.8)
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24145.
Published: 2024-11-22T20:52:19.887Z
Updated: 2024-12-04T21:38:05.019Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9730 vulnerable 2026-06-08 07:00:28.597996 Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability
HIGH (7.8)
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24146.
Published: 2024-11-22T20:52:15.882Z
Updated: 2024-12-04T21:38:23.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9729 vulnerable 2026-06-08 07:00:28.590653 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24144.
Published: 2024-11-22T20:52:11.935Z
Updated: 2024-12-04T21:38:37.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9728 vulnerable 2026-06-08 07:00:28.590267 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24112.
Published: 2024-11-22T20:52:07.576Z
Updated: 2024-12-04T21:38:48.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9727 vulnerable 2026-06-08 07:00:28.585562 Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
HIGH (7.8)
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24111.
Published: 2024-11-22T20:52:03.170Z
Updated: 2024-12-04T21:39:00.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9726 vulnerable 2026-06-08 07:00:28.584922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9725 vulnerable 2026-06-08 07:00:28.584480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9724 vulnerable 2026-06-08 07:00:28.584158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9723 vulnerable 2026-06-08 07:00:28.583717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9722 vulnerable 2026-06-08 07:00:28.583185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9721 vulnerable 2026-06-08 07:00:28.582650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9720 vulnerable 2026-06-08 07:00:28.582325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9719 vulnerable 2026-06-08 07:00:28.581970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9718 vulnerable 2026-06-08 07:00:28.581615 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9717 vulnerable 2026-06-08 07:00:28.581176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9716 vulnerable 2026-06-08 07:00:28.580624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9715 vulnerable 2026-06-08 07:00:28.580047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9714 vulnerable 2026-06-08 07:00:28.578690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.