Lenovo Updates Remote Code Execution Vulnerability

Lenovo Updates is a set of driver and software update program from China Lenovo. A remote code execution vulnerability exists in Lenovo Updates. A remote attacker could exploit this vulnerability by hijacking and altering the update file downloaded by the user to execute arbitrary code...