Remote Code Execution Vulnerability in Trimble SketchUp via Crafted RLE8 Compressed BMP

CVE-2013-3663 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.

Learn more about our Web Application Penetration Testing UK.