CVE-2016-2536

Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2016-02-22

Last modified

2024-08-05

Weaknesses

CWE-399

Affected products

• Sketchup (Google)
• 3d Visual Enterprise Viewer (Sap)

References

• http://www.securityfocus.com/bid/83307
• http://www.zerodayinitiative.com/advisories/ZDI-16-173
• http://www.zerodayinitiative.com/advisories/ZDI-16-174
• http://www.zerodayinitiative.com/advisories/ZDI-16-175
• http://www.zerodayinitiative.com/advisories/ZDI-16-176