PT-2010-2077 · Lib3Ds+1 · Lib3Ds+1

Published 2010-01-15 · Updated 2018-10-10 · CVE-2010-0280

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions lib3ds versions 1.x Google SketchUp versions 7.x before 7.1 M2

Description The issue is related to an array index error in the lib3ds library, which can be exploited by remote attackers through crafted structures in a 3DS file, potentially leading to memory corruption or arbitrary code execution. The error is probably related to the mesh.c file.

Recommendations For lib3ds version 1.x, update to a version that fixes the array index error. For Google SketchUp versions 7.x before 7.1 M2, update to version 7.1 M2 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2010-0280

OPENSUSE-SU-2024:10301-1

Affected Products

Google Sketchup

Lib3Ds

References · 14

• 🔥 http://coresecurity.com/content/google-sketchup-vulnerability · Exploit
• 🔥 http://securityfocus.com/bid/37708 · Exploit
• https://ubuntu.com/security/CVE-2010-0280 · Vendor Advisory
• http://secunia.com/advisories/38187 · Vendor Advisory
• http://secunia.com/advisories/38185 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-0280 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2010-0280 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2010-0280 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0280 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-0280 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2010-0280 · Vendor Advisory
• http://securityfocus.com/archive/1/508913/100/0/threaded · Note
• http://vupen.com/english/advisories/2010/0133 · Note
• http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303 · Note