Summary
This host is installed with Google SketchUp and is prone to to remote code execution vulnerability.
Impact
Successful exploitation could allow attackers to cause SketchUp to exit unexpectedly and execute arbitrary code by tricking a user into opening a specially crafted '.SKP' file.
Impact Level: System/Application
Solution
Upgrade to Google SketchUp version 8.0 or later,
For updates refer to http://sketchup.google.com/download/index2.html
Insight
The flaw is due to an error when handling certain types of invalid edge geometry in a specially crafted SketchUp (.SKP) file.
Affected
Google SketchUp version 7.1 Maintenance Release 2 and prior on Windows
References
Severity
Classification
-
CVE CVE-2011-2478 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities