Lenovo SU v5.07 - Buffer Overflow & Code Execution

Document Title: =============== Lenovo SU v5.07 - Buffer Overflow & Code Execution References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2131 Lenovo Security ID: LEN-19625 https://nvd.nist.gov/vuln/detail/CVE-2018-9063...

Lenovo Patches Arbitrary Code Execution Flaw

Lenovo issued a pair of security advisories on Friday for its popular ThinkPad line and System x servers. One bug is tied to an authentication flaw in the Secure Boot process; and the other to a vulnerability that would allow for arbitrary code execution. The company’s internal testing team...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

CVE-2018-9063 affects Lenovo System Update’s MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe). Versions prior to 5.07.0072 contain a local buffer overflow by entering very large user ID or password, leading to undefined behavior and potential arbitrary code execution. The exploit is loca...

Buffer Overflow in Lenovo System Update Drive Mapping Utility - US

Lenovo Security Advisory: LEN-19625 Potential Impact: Buffer overflow resulting in undefined behaviors, such as execution of arbitrary code Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9063 Summary Description: MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe...

Buffer Overflow in Lenovo System Update Drive Mapping Utility - Lenovo Support US

No description provided...