Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2010-0280
HistoryJan 15, 2010 - 5:30 p.m.

CVE-2010-0280

2010-01-1517:30:00
CWE-189
mitre
web.nvd.nist.gov
36
cve-2010-0280
array index error
jan eric kyprianidis
lib3ds
google sketchup
denial of service
memory corruption
arbitrary code
3ds file
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON

Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.

Affected configurations

Nvd
Node
jan_eric_krprianidislib3dsMatch1.0
AND
googlegoogle_sketchupMatch7.0
OR
googlegoogle_sketchupMatch7.0.10247
OR
googlegoogle_sketchupMatch7.1.4871
OR
googlegoogle_sketchupMatch7.1.6087
VendorProductVersionCPE
jan_eric_krprianidislib3ds1.0cpe:2.3:a:jan_eric_krprianidis:lib3ds:1.0:*:*:*:*:*:*:*
googlegoogle_sketchup7.0cpe:2.3:a:google:google_sketchup:7.0:*:*:*:*:*:*:*
googlegoogle_sketchup7.0.10247cpe:2.3:a:google:google_sketchup:7.0.10247:*:*:*:*:*:*:*
googlegoogle_sketchup7.1.4871cpe:2.3:a:google:google_sketchup:7.1.4871:*:*:*:*:*:*:*
googlegoogle_sketchup7.1.6087cpe:2.3:a:google:google_sketchup:7.1.6087:*:*:*:*:*:*:*

Related

cvelist 1
openvas 11
gentoo 1
nessus 6
ubuntucve 1
coresecurity 1
fedora 4
securityvulns 2
prion 1
debiancve 1
nvd 1
cvelist
cvelist
CVE-2010-0280
2010-01-15 17:00:00
openvas
openvas
Fedora Update for lib3ds FEDORA-2010-14632
2010-10-01 00:00:00
Fedora Update for lib3ds FEDORA-2010-14644
2010-10-01 00:00:00
Fedora Update for mingw32-OpenSceneGraph FEDORA-2010-17621
2010-11-23 00:00:00
gentoo
gentoo
lib3ds: User-assisted execution of arbitrary code
2014-05-18 00:00:00
nessus
nessus
Fedora 13 : mingw32-OpenSceneGraph-2.8.2-3.fc13 (2010-17621)
2010-11-22 00:00:00
GLSA-201405-23 : lib3ds: User-assisted execution of arbitrary code
2014-05-19 00:00:00
Fedora 14 : lib3ds-1.3.0-9.fc14 (2010-14730)
2010-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2010-0280
2010-01-15 00:00:00
coresecurity
coresecurity
Google SketchUp 'lib3ds' 3DS Importer Memory Corruption
2010-01-13 00:00:00
fedora
fedora
[SECURITY] Fedora 12 Update: lib3ds-1.3.0-9.fc12
2010-09-24 20:44:45
[SECURITY] Fedora 13 Update: mingw32-OpenSceneGraph-2.8.2-3.fc13
2010-11-19 22:36:21
[SECURITY] Fedora 13 Update: lib3ds-1.3.0-9.fc13
2010-09-24 20:41:58
securityvulns
securityvulns
Google SketchUp memory corruption
2010-01-17 00:00:00
[CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption
2010-01-17 00:00:00
prion
prion
Memory corruption
2010-01-15 17:30:00
debiancve
debiancve
CVE-2010-0280
2010-01-15 17:30:00
nvd
nvd
CVE-2010-0280
2010-01-15 17:30:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

High

EPSS

0.026

Percentile

90.4%

JSON
Related for CVE-2010-0280
cvelist1openvas11gentoo1nessus6ubuntucve1coresecurity1fedora4securityvulns2prion1debiancve1nvd1