CVSS: 9.8EPSS: 4%CPEs: 1EXPL: 0CVE-2013-6038
https://notcve.org/view.php?id=CVE-2013-6038
17 Dec 2013 — Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file. Desbordamiento de búfer basado en pila en Trimble SketchUp Viewer 13.0.4124 permite a atacantes remotos ejecutar código arbitrario a través de un archivo .SKP. • http://osvdb.org/100988 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.8EPSS: 25%CPEs: 11EXPL: 5CVE-2013-3664 – Sketchup BMP Material RLE4 Heap Overflow
https://notcve.org/view.php?id=CVE-2013-3664
31 May 2013 — Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662. NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue. Trimble SketchUp (anteriormente Google SketchUp) anterior a 2013 (13.0.36... • https://github.com/defrancescojp/CVE-2013-3664_MAC • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 0CVE-2012-5053 – Trimble Infrastructure GNSS Series Receivers XSS
https://notcve.org/view.php?id=CVE-2012-5053
16 Jan 2013 — Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en el Receiver Web User Interface en Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, y NetR9 antes de v4.70, y NetR5 antes de v1.3-2, q... • http://archives.neohapsis.com/archives/bugtraq/2013-01/0063.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •