CVE-2016-8237

CVE-2016-8237 describes a remote code execution in Lenovo Updates (not Lenovo System Update) where a man-in-the-middle attacker intercepting traffic between the user and the update site could alter downloaded update files and execute arbitrary code with system-level privileges. The Lenovo advisor...