Lenovo System Update Buffer Overflow Vulnerability

Lenovo System Update is a set of automatic system update tools from the Chinese company Lenovo Lenovo, which includes device driver updates, Windows system patch updates and more. A buffer overflow vulnerability exists in MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe in versions prior t...

CVE-2018-9063

MapDrv C:\Program Files\Lenovo\System Update\mapdrv.exe In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary...