CVE-2018-9063

2018-05-0300:00:00

lenovo

www.cve.org

0.0004 Low

EPSS

Percentile

12.6%

JSON

MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program’s buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.

CNA Affected

[
  {
    "product": "Lenovo System Update",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Earlier than 5.07.0072"
      }
    ]
  }
]

References

www.securityfocus.com/bid/104125

support.lenovo.com/us/en/solutions/LEN-19625

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2018-9063