CVE-2024-9723

Summary

CVE-2024-9723 is a remote code execution vulnerability affecting Trimble SketchUp Viewer. Malicious SKP files can be exploited by attackers to execute arbitrary code on affected systems. The root cause of this issue lies in the inadequate validation of object existence during SKP file parsing. Attackers can leverage this vulnerability to execute code in the context of the current process, requiring user interaction through visiting a malicious page or opening a malicious file. Previously identified as ZDI-CAN-24107.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.