CVE-2010-0280 - Vulnerability Details - OpenCVE

Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.03892.

Key SSVC decision points have not yet been added.

Vendors	Products
Google	Google Sketchup
Jan Eric Krprianidis	Lib3ds

Configuration 1 [-]

AND

cpe:2.3:a:jan_eric_krprianidis:lib3ds:1.0:*:*:*:*:*:*:*

OR	cpe:2.3:a:google:google_sketchup:7.0:::::::*
	cpe:2.3:a:google:google_sketchup:7.0.10247:::::::*
	cpe:2.3:a:google:google_sketchup:7.1.4871:::::::*
	cpe:2.3:a:google:google_sketchup:7.1.6087:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2010-0311	Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://secunia.com/advisories/38185
http://secunia.com/advisories/38187
http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303
http://www.coresecurity.com/content/google-sketchup-vulnerability
http://www.securityfocus.com/archive/1/508913/100/0/threaded
http://www.securityfocus.com/bid/37708
http://www.vupen.com/english/advisories/2010/0133

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2010-01-15T17:00:00

Updated: 2024-08-07T00:45:11.980Z

Reserved: 2010-01-12T00:00:00

Link: CVE-2010-0280

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2010-01-15T17:30:00.580

Modified: 2025-04-09T00:30:58.490

Link: CVE-2010-0280

Redhat

No data.

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-01-13T00:00:00", "descriptions": [{"lang": "en", "value": "Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-10T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "38185", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/38185"}, {"name": "20100113 [CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/508913/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://www.coresecurity.com/content/google-sketchup-vulnerability"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303"}, {"name": "38187", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/38187"}, {"name": "ADV-2010-0133", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2010/0133"}, {"name": "37708", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/37708"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2010-0280", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "38185", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/38185"}, {"name": "20100113 [CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/508913/100/0/threaded"}, {"name": "http://www.coresecurity.com/content/google-sketchup-vulnerability", "refsource": "MISC", "url": "http://www.coresecurity.com/content/google-sketchup-vulnerability"}, {"name": "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303", "refsource": "CONFIRM", "url": "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303"}, {"name": "38187", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/38187"}, {"name": "ADV-2010-0133", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2010/0133"}, {"name": "37708", "refsource": "BID", "url": "http://www.securityfocus.com/bid/37708"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T00:45:11.980Z"}, "title": "CVE Program Container", "references": [{"name": "38185", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/38185"}, {"name": "20100113 [CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/508913/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.coresecurity.com/content/google-sketchup-vulnerability"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303"}, {"name": "38187", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/38187"}, {"name": "ADV-2010-0133", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2010/0133"}, {"name": "37708", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/37708"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2010-0280", "datePublished": "2010-01-15T17:00:00", "dateReserved": "2010-01-12T00:00:00", "dateUpdated": "2024-08-07T00:45:11.980Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jan_eric_krprianidis:lib3ds:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "31DFFE18-61E1-4B0B-BE76-630A6E3F04C0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:a:google:google_sketchup:7.0:*:*:*:*:*:*:*", "matchCriteriaId": "C1654DC5-3E08-4F09-BF95-D5ADDAC7EEB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:google:google_sketchup:7.0.10247:*:*:*:*:*:*:*", "matchCriteriaId": "51465673-7CA9-4F00-BFE6-3313020B5208", "vulnerable": true}, {"criteria": "cpe:2.3:a:google:google_sketchup:7.1.4871:*:*:*:*:*:*:*", "matchCriteriaId": "1C5C3005-EE4F-4D9E-9FFB-2146874CAAE6", "vulnerable": true}, {"criteria": "cpe:2.3:a:google:google_sketchup:7.1.6087:*:*:*:*:*:*:*", "matchCriteriaId": "7254B40E-67A4-4A8B-B22A-B8DB99662BBD", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c."}, {"lang": "es", "value": "Error de indice de array en Jan Eric Kyprianidis lib3ds v1.x, como el utilizado en Google SketchUp v7.x anterior a 7.1 M2, permite a atacantes remotos provocar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria) o puede que ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de estructuras manipuladas en un fichero 3DS. Puede que est\u00e9 relacionado con mesh.c."}], "id": "CVE-2010-0280", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2010-01-15T17:30:00.580", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/38185"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/38187"}, {"source": "cve@mitre.org", "url": "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.coresecurity.com/content/google-sketchup-vulnerability"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/508913/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/37708"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2010/0133"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/38185"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/38187"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.coresecurity.com/content/google-sketchup-vulnerability"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/508913/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/37708"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2010/0133"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}