high8.8
CVE-2016-2536
Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document.
Impact
Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | 3d Visual Enterprise Viewer | All versions |
| Sketchup | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/83307
- http://www.zerodayinitiative.com/advisories/ZDI-16-173
- http://www.zerodayinitiative.com/advisories/ZDI-16-174
- http://www.zerodayinitiative.com/advisories/ZDI-16-175
- http://www.zerodayinitiative.com/advisories/ZDI-16-176
- http://www.securityfocus.com/bid/83307
- http://www.zerodayinitiative.com/advisories/ZDI-16-173
- http://www.zerodayinitiative.com/advisories/ZDI-16-174
- http://www.zerodayinitiative.com/advisories/ZDI-16-175
- http://www.zerodayinitiative.com/advisories/ZDI-16-176