CVE-2012-4894 Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SKP file.
HighCVSS 9.3
EPSS 5.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SKP file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google sketchup | <= 8.0 | No fix listed |
| Google sketchup | = 6.0-maintenance_6 | No fix listed |
| Google sketchup | = 7.0-maintenance_1 | No fix listed |
| Google sketchup | = 7.1 | No fix listed |
| Google sketchup | = 7.1-maintenance_1 | No fix listed |
| Google sketchup | = 7.1-maintenance_2 | No fix listed |
| Google sketchup | = 8.0 | No fix listed |
| Google sketchup | = 8.0-maintenance_1 | No fix listed |
References
- 85570 vdb-entry
- support.google.com
- technet.microsoft.com
- 55598 vdb-entry
- google-sketchup-skp-code-execution(78676) vdb-entry