CVE-2010-0280

CVE-2010-0280

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 7.8%
exploitation probability
7.8%top 5% of all CVEs
observed exploitation
nono source reports it
Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.
Affected products
n/a · n/a
References
http://secunia.com/advisories/38185http://secunia.com/advisories/38187http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303http://www.coresecurity.com/content/google-sketchup-vulnerabilityhttp://www.securityfocus.com/archive/1/508913/100/0/threadedhttp://www.securityfocus.com/bid/37708http://www.vupen.com/english/advisories/2010/0133