Title

Multiple Vulnerabilities in Trimble SketchUp (Cat II impact)

Discussion

Trimble has addressed multiple vulnerabilities affecting SketchUp. SketchUp is a 3D modeling program designed for architectural, civil, and mechanical engineers as well as filmmakers, game developers, and related professions. To exploit these vulnerabilities, an attacker would entice a user to opening a malicious file with an affected version of SketchUp. If successfully exploited, these vulnerabilities would allow a remote attacker to execute arbitrary code and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-38875

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.