Google Sketchup vulnerabilities

2 CVEs affecting Google Sketchup, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0316, published 2010-01-15.

More from Google.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-0280, published 2010-01-15. High severity, CVSS 9.3. EPSS: 7.8% chance of exploitation in the next 30 days. Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute…
• CVE-2010-0316, published 2010-01-15. High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days. Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file.