SketchUp Viewer buffer overflow vulnerability

Overview

SketchUp Viewer version 13.0.4124 is vulnerable to a buffer overflow when opening a malformed .SKP file.

Description

CWE-121: Stack-based Buffer Overflow - CVE-2013-6038

SketchUp Viewer version 13.0.4124 is vulnerable to a stack buffer overflow when parsing a specially crafted .SKP file. When executed, it may allow a remote unauthenticated attacker to run arbitrary code in the context of the logged in user. It is unknown if other versions of this software are also affected.

---

Impact

By convincing a user to open a specially crafted .SKP file with SketchUp, a remote unauthenticated attacker could execute arbitrary code on a vulnerable system in the context of the logged in user.

---

Solution

We are currently unaware of a practical solution to this problem.

---

Use the Microsoft Enhanced Mitigation Experience Toolkit

The Microsoft Enhanced Mitigation Experience Toolkit (EMET) can be used to help prevent exploitation of these vulnerabilities.

Use caution when opening email attachments

See US-CERT tip ST04-010 for details.

---

Vendor Information

586958

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

SketchUp Affected

Notified: September 24, 2013 Updated: December 13, 2013

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

We are not aware of further vendor information regarding this vulnerability.

CVSS Metrics

Group	Score	Vector
Base	4.4	AV:L/AC:M/Au:N/C:P/I:P/A:P
Temporal	4	E:POC/RL:U/RC:C
Environmental	1.0	CDP:N/TD:L/CR:ND/IR:ND/AR:ND

References

• <http://cwe.mitre.org/data/definitions/121.html&gt;
• <http://support.microsoft.com/kb/2458544&gt;
• <http://www.us-cert.gov/ncas/tips/ST04-010&gt;

Acknowledgements

Thanks to Christopher Gabriel of Telos Corporation for reporting this vulnerability.

This document was written by Chris King.

Other Information

CVE IDs:	CVE-2013-6038
Date Public:	2013-12-12 Date First Published: