CVE-2011-2478: Google Sketchup

High severity, CVSS 9.3. EPSS: 2.1% chance of exploitation in the next 30 days.

Google SketchUp before 8 does not properly handle edge geometry in SketchUp (aka .SKP) files, which allows remote attackers to execute arbitrary code via a crafted file.

Affected products

  • Google Sketchup: up to and including 7.1; version 6.0 only; version 7.0 only; version 7.1 only

Published 2012-04-17. Last modified 2026-06-16.