PT-2010-2077 · Lib3Ds+1 · Lib3Ds+1

Publicado 2010-01-15 · Atualizado 2018-10-10 · CVE-2010-0280

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions lib3ds versions 1.x Google SketchUp versions 7.x before 7.1 M2

Description The issue is related to an array index error in the lib3ds library, which can be exploited by remote attackers through crafted structures in a 3DS file, potentially leading to memory corruption or arbitrary code execution. The error is probably related to the mesh.c file.

Recommendations For lib3ds version 1.x, update to a version that fixes the array index error. For Google SketchUp versions 7.x before 7.1 M2, update to version 7.1 M2 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-0280

OPENSUSE-SU-2024:10301-1

Produtos afetados

Google Sketchup

Lib3Ds

Referências · 14

• 🔥 http://coresecurity.com/content/google-sketchup-vulnerability · Exploit
• 🔥 http://securityfocus.com/bid/37708 · Exploit
• https://ubuntu.com/security/CVE-2010-0280 · Aviso do Fabricante
• http://securityfocus.com/archive/1/508913/100/0/threaded · Nota
• http://secunia.com/advisories/38187 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/0133 · Nota
• http://secunia.com/advisories/38185 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2010-0280 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2010-0280 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2010-0280 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0280 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2010-0280 · Aviso do Fabricante
• http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2010-0280 · Aviso do Fabricante