CVE-2017-3759

The CVE-2017-3759 issue affects the Lenovo Service Framework (LSF) Android application used on Lenovo tablets and select phones. The root cause is that LSF accepts some server responses without proper validation, exposing the app to man-in-the-middle attacks and potential remote code execution. P...

CVE-2017-3759

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...