CVE-2018-9063

published 2018-05-04

CVE-2018-9063: MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an…

high 7.8 CVSS 3.0

AV L AC L PR L UI N S U C H I H A H

MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
lenovo	system_update	< 5.07.0072	5.07.0072
lenovo_group_ltd	lenovo_system_update	—	—

CWE-119