Summary
This host is installed with Google SketchUp and is prone to to remote code execution vulnerability.
Impact
Successful exploitation could allow attackers to cause SketchUp to exit unexpectedly and execute arbitrary code by tricking a user into opening a specially crafted '.SKP' file.
Impact Level: System/Application
Solution
Upgrade to Google SketchUp version 8.0 or later,
For updates refer to http://sketchup.google.com/download/index2.html
Insight
The flaw is due to an error when handling certain types of invalid edge geometry in a specially crafted SketchUp (.SKP) file.
Affected
Google SketchUp version 7.1 Maintenance Release 2 and prior on Mac OS X
References
Severity
Classification
-
CVE CVE-2011-2478 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe AIR Multiple Vulnerabilities-01 Aug14 (Windows)
- Adobe Acrobat Multiple Unspecified Vulnerabilities -01 Feb13 (Mac OS X)
- Adobe Acrobat and Reader PDF Handling Multiple Vulnerabilities (Windows)
- Adobe Acrobat Multiple Unspecified Vulnerabilities - Mac OS X
- Adobe AIR Multiple Vulnerabilities -02 April 13 (Windows)