CVE-2016-3944

CVE-2016-3944 describes a vulnerability in the Lenovo Accelerator Application UpdateAgent that allows a remote attacker with network access to perform a man-in-the-middle attack by spoofing update responses from susapi.lenovomm.com, enabling arbitrary code execution. Affected product: Lenovo Acce...

KLA10821 Arbitrary code execution vulnerability in Lenovo Accelerator Application

Improper implementation of update mechanism was found in Lenovo Accelerator Application. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via spoofing an update response by man-in-the-middle attack. Technical details To...