CVE-2024-9722

Summary

CVE-2024-9722 is a remote code execution vulnerability affecting Trimble SketchUp Viewer. Malicious SKP files can be used to exploit this issue, which stems from the lack of proper object validation during file parsing. An attacker can execute arbitrary code in the context of the current process once the target interacts with the malicious file or visits a malicious page. This vulnerability, identified as ZDI-CAN-24106 before its public disclosure, poses a significant risk to affected installations of Trimble SketchUp Viewer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.