CVE-2024-9726

Summary

CVE-2024-9726 is a stack-based buffer overflow vulnerability affecting Trimble SketchUp Viewer. Malicious SKP files can be used to exploit this issue, leading to remote code execution. The flaw arises due to insufficient validation of user-supplied data before copying it to a fixed-length buffer. An attacker can successfully execute arbitrary code in the context of the current process, necessitating user interaction, such as visiting a malicious webpage or opening a malicious file. This vulnerability, identified as ZDI-CAN-24110 before it was assigned a CVE ID, poses a significant risk to affected installations of Trimble SketchUp Viewer.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.