Sketchup CVE-2016-2536

HIGH

Resource Management Errors (CWE-399)

2016-02-22 cve@mitre.org

RCE Google SAP Sketchup 3D Visual Enterprise Viewer

8.8

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

1

CVE Published

Feb 22, 2016 - 15:59 cve.org

HIGH 8.8

DescriptionCVE.org

Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp.

AnalysisAI

Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-399. Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp. Affected products include: Sap 3D Visual Enterprise Viewer, Google Sketchup.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Sketchup

View all

CVE-2013-3664 CRITICAL Emergency POC

Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code vi

CVE-2013-3662 CRITICAL Emergency POC

Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via

CVE-2013-3663 CRITICAL Emergency POC

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, a

CVE-2013-7388 CRITICAL Act Now POC

Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689),

CVE-2012-4894 CRITICAL Act Now

Google SketchUp before 8.0.14346 (aka 8 Maintenance 3) allows user-assisted remote attackers to execute arbitrary code o

CVE-2026-9264 CRITICAL Act Now

Arbitrary command execution and local file theft in Trimble SketchUp 2026 arises from a cross-site scripting flaw in the

CVE-2025-2024 HIGH This Week

Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. Rated high severity (CVSS

CVE-2024-7510 HIGH This Week

Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), th

CVE-2024-7509 HIGH This Week

Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. Rated high severity (

CVE-2024-9731 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. Rated high severity (CVS

CVE-2024-9730 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. Rated high severity (CVS

CVE-2024-9729 HIGH This Week

Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. Rated high severity (CVSS 7

Same weakness CWE-399 – Resource Management Errors

View all

CVE-2013-3893 HIGH POC

CVE-2013-0025 CRITICAL POC

CVE-2015-0064 CRITICAL POC

CVE-2015-0065 CRITICAL POC

CVE-2013-3846 CRITICAL POC

CVE-2016-5427 HIGH

CVE-2013-0233 MEDIUM POC

CVE-2013-1305 HIGH

Same technique RCE

View all

CVE-2021-44228 CRITICAL POC

CVE-2017-7269 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2023-3519 CRITICAL POC

CVE-2015-5119 CRITICAL POC

CVE-2016-4117 CRITICAL POC

CVE-2015-3113 CRITICAL POC

Share

CVE-2016-2536 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy