Lenovo SU v5.07 - Buffer Overflow & Code Execution

Document Title: =============== Lenovo SU v5.07 - Buffer Overflow & Code Execution References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2131 Lenovo Security ID: LEN-19625 https://nvd.nist.gov/vuln/detail/CVE-2018-9063...

Lenovo SU v5.07 - Buffer Overflow & Code Execution

Document Title: =============== Lenovo SU v5.07 - Buffer Overflow & Code Execution References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2131 Lenovo Security ID: LEN-19625 https://nvd.nist.gov/vuln/detail/CVE-2018-9063...

Lenovo System Update Buffer Overflow Vulnerability

Lenovo System Update is a set of automatic system update tools from the Chinese company Lenovo Lenovo, which includes device driver updates, Windows system patch updates and more. A buffer overflow vulnerability exists in MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe in versions prior t...

Lenovo Patches Arbitrary Code Execution Flaw

Lenovo issued a pair of security advisories on Friday for its popular ThinkPad line and System x servers. One bug is tied to an authentication flaw in the Secure Boot process; and the other to a vulnerability that would allow for arbitrary code execution. The company’s internal testing team...

Design/Logic Flaw

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

CVE-2018-9063

CVE-2018-9063 affects Lenovo System Update’s MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe). Versions prior to 5.07.0072 contain a local buffer overflow by entering very large user ID or password, leading to undefined behavior and potential arbitrary code execution. The exploit is loca...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...

Buffer Overflow in Lenovo System Update Drive Mapping Utility - US

Lenovo Security Advisory: LEN-19625 Potential Impact: Buffer overflow resulting in undefined behaviors, such as execution of arbitrary code Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9063 Summary Description: MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe...