CVE-2010-0280
Critical
Description
Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.
SeverityCritical
CVSS9.3
Exploit probability—
Product
Jan Eric Krprianidis Lib3ds
PublishedJan 15, 2010
First seenJan 15, 2010
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jan_eric_krprianidis lib3ds | 1.0 | — |
| google google_sketchup | 7.0, 7.0.10247, 7.1.4871, 7.1.6087 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.