This host is installed with Google SketchUp and is prone to to memory corruption vulnerability.

Successful exploitation will allow the attacker to execute arbitrary code in the context of the user running the application which can compromise the application and possibly the system. Impact Level: System/Application

Upgrade to Google SketchUp version 8 Maintenance Release 3 or later, For updates refer to http://sketchup.google.com/download/index2.html

SketchUp fails to parse specially crafted SketchUp document (SKP) files and can be exploited to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SKP file.

Google SketchUp version 8 Maintenance Release 2 and prior on Windows

• http://secunia.com/advisories/50663
• http://technet.microsoft.com/en-us/security/msvr/msvr12-015
• http://www.osvdb.org/85570

---

Updated on 2015-03-25