Vulnerabilities > CVE-2010-0316 - Numeric Errors vulnerability in Google Sketchup

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
google
CWE-189
critical
nessus

Summary

Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file.

Common Weakness Enumeration (CWE)

Nessus

NASL familyWindows
NASL idGOOGLE_SKETCHUP_7_1_M2.NASL
descriptionThe version of Google SketchUp installed on the remote host is earlier than 7.1 Maintenance Release 2. Such versions fail to perform adequate checks when processing data contained in
last seen2020-06-01
modified2020-06-02
plugin id56980
published2011-11-30
reporterThis script is Copyright (C) 2011-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/56980
titleGoogle SketchUp < 7.1 M2 Remote Code Execution Vulnerabilities