CVE-2013-3664
HighSummary
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.
Risk Assessment
This vulnerability may lead to remote code execution, posing a significant security risk to systems using this version of the software.
Recommendation
It is recommended to update Trimble SketchUp to version 2013 (13.0.3689) or later to mitigate this vulnerability.
Other vulnerabilities in Trimble SketchUp
Original NVD description (English source)
Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue.