CVE-2013-7388

High

Published: 01/07/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow in paintlib, used in Trimble SketchUp before version 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap.

Risk Assessment

An attacker can exploit this vulnerability to execute arbitrary code remotely, potentially taking control of the user's system.

Recommendation

It is recommended to update Trimble SketchUp to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activity.

Other vulnerabilities in paintlib

CVE-2013-3663High
A heap-based buffer overflow in paintlib, used in Trimble SketchUp before version 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.

Original NVD description (English source)

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).