CVE-2024-9717

Summary

CVE-2024-9717 is a remote code execution vulnerability affecting Trimble SketchUp Viewer. Malicious SKP files can be used to exploit this issue, which arises due to an uninitialized variable during file parsing. The lack of proper memory initialization allows attackers to execute arbitrary code in the context of the current process, necessitating user interaction such as visiting a malicious page or opening a malicious file. This vulnerability, originally identified as ZDI-CAN-24101, poses a significant risk to affected installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.