CVE-2013-3663

High

Published: 13/06/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow in paintlib, used in Trimble SketchUp before version 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.

Risk Assessment

Attackers can exploit this vulnerability to execute arbitrary code remotely, potentially leading to full system compromise.

Recommendation

It is recommended to update Trimble SketchUp to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in paintlib

CVE-2013-7388High
A heap-based buffer overflow in paintlib, used in Trimble SketchUp before version 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap.

Original NVD description (English source)

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.