Every CVESearch/Get API key

CVE-2013-6038

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to...

6.8 Medium

CVE-2013-6038 is a medium vulnerability (CVSS 6.8) in Trimble Sketchup Viewer, published December 17, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.57%, the 85th percentile. No source names a fixed version.

What does this mean?
Severity
6.8 MediumCVSS 2.0, NVD
Exploit chance
2.57%EPSS, 85th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file.

Exploit likelihood

2.57%Down 3.1 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used6.8

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file.

Record
CVE-2013-6038
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file.

Record
CVE-2013-6038
Updated
2026-11-02
EUVDEUVD-2013-5868No score

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file.

Record
EUVD-2013-5868
Updated
2026-11-03
GitHub AdvisoriesGHSA-5h8q-vxqh-pm9wNo score

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to...

Stack-based buffer overflow in Trimble SketchUp Viewer 13.0.4124 allows remote attackers to execute arbitrary code via a crafted .SKP file.

Record
GHSA-5h8q-vxqh-pm9w
Weakness
CWE-119
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open