[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7ml36qM258Gdi578SxibX6Eood6S9n6FWbU5hypyKcw":3,"g5a-ex:trimble\u002Fsketchup_viewer@*":94,"g5a-family:trimble\u002Fsketchup_viewer":96},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":71,"seoMetadata":72,"meta":91},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"trimble","sketchup_viewer",3,17,0,"2024-11-22",[14,18,21],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"13.0.4124",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"22.0.316.0",15,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"22.0.354.0","Sketchup Viewer by Trimble is a technology product with 3 tracked versions and 17 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},[29,37,44,48,51,54,58,62,65,68],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":17,"epssScore":36},"CVE-2013-6038","Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file.","2013-12-17",6.8,"v2","Medium",0.02569,{"cveId":38,"description":39,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":43},"CVE-2024-7508","Trimble SketchUp Viewer SKP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19575.",7.8,"v3.1","High",0.00415,{"cveId":45,"description":46,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":47},"CVE-2024-9721","Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24105.",0.00372,{"cveId":49,"description":50,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":47},"CVE-2024-9714","Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24097.",{"cveId":52,"description":53,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":47},"CVE-2024-9723","Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24107.",{"cveId":55,"description":56,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":57},"CVE-2024-9726","Trimble SketchUp Viewer SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24110.",0.00339,{"cveId":59,"description":60,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":61},"CVE-2024-9728","Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24112.",0.00322,{"cveId":63,"description":64,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":61},"CVE-2024-9722","Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24106.",{"cveId":66,"description":67,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":61},"CVE-2024-9724","Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24108.",{"cveId":69,"description":70,"publishedDate":12,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":17,"epssScore":61},"CVE-2024-9725","Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24109.",[],{"title":73,"metaDescription":74,"keywords":75,"structuredData":76},"Sketchup Viewer by Trimble - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sketchup Viewer by Trimble covering 3 versions with 17 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sketchup Viewer vulnerabilities, Sketchup Viewer security, Sketchup Viewer CVE, Trimble Sketchup Viewer, Sketchup Viewer threat intelligence, Trimble security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":77,"@type":78,"name":79,"description":74,"url":80,"manufacturer":81,"applicationCategory":85,"softwareVersion":86,"mainEntity":87},"https:\u002F\u002Fschema.org","SoftwareApplication","Sketchup Viewer","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftrimble\u002Fsketchup_viewer",{"@type":82,"name":83,"url":84},"Organization","Trimble","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftrimble","Security Software","3 versions tracked",{"@type":88,"name":89,"description":90,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sketchup Viewer Security Vulnerabilities","Security vulnerabilities affecting Sketchup Viewer by Trimble",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":92,"apiVersion":93},"2026-10-17T11:21:32.757Z","3.0",{"rows":95,"total":11,"capped":17,"failed":11},[],[]]