CVE-2024-9714

Summary

CVE-2024-9714 is a remote code execution vulnerability affecting Trimble SketchUp Viewer. Malicious SKP files can be exploited by attackers to execute arbitrary code on affected systems. The flaw stems from a lack of object validation during SKP file parsing, enabling attackers to manipulate nonexistent objects and trigger memory corruption. User interaction, such as visiting a malicious page or opening a specially crafted file, is necessary for successful exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.