CVE-2018-9063
High
Description
MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.
SeverityHigh
CVSS7.8
Exploit probability32. percentile0.4%
ProductLenovo System Update
PublishedMay 4, 2018
First seenMay 4, 2018
How to fix
Update
- lenovo system_update5.07.0072 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo system_update | v < 5.07.0072 | 5.07.0072 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.