CVE-2010-0316

Description

Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file.

Affected products

• Google / google_sketchup7.0 – 7.0
• Google / google_sketchup7.0.10247 – 7.0.10247
• Google / google_sketchup7.1.4871 – 7.1.4871
• Google / google_sketchup7.1.6087 – 7.1.6087

References

• MISChttp://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303
• VENDOR_ADVISORYhttp://secunia.com/advisories/38187
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2010/0133