CVE:CVE-2010-0280
CNNVD:CNNVD-201001-154
Google Sketchup是用于创建3D模型的工具。 
Google SketchUp的Jan Eric Kyprianidis lib3ds 1.x中存在数组索引错误。远程攻击者可以借助与mesh.c相关的3DS文件中的特制结构，导致拒绝服务（内存破坏）或执行任意代码。
solution:Upgrade jan_eric_krprianidis lib3ds to a higher version than 1.0,and avoid the version 1.0; Upgrade google google_sketchup to a higher version than 7.0,7.0.10247,7.1.4871,7.1.6087,and avoid the version 7.0,7.0.10247,7.1.4871,7.1.6087