CVE-2024-9730

Summary

CVE-2024-9730 is a remote code execution vulnerability affecting Trimble SketchUp Viewer. Malicious SKP files can cause memory corruption during parsing, allowing attackers to execute arbitrary code. User interaction, such as visiting a malicious webpage or opening a maliciously crafted file, is required to exploit this vulnerability. The flaw stems from insufficient validation of user-supplied data, leading to this memory corruption condition. Successful exploitation grants the attacker the ability to execute code in the context of the affected process. (Previously identified as ZDI-CAN-24146.)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.