KLA10181
ACE vulnerability in Sketchup

Multiple critical vulnerabilities have been found in Google SketchUp. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities

1. A buffer overflow can be exploited remotely via a specially designed BMP file;
2. The out of bounds write can be exploited remotely via a specially designed palette.

Sketchup versions 13.0.3688 and earlier

Update to latest version