Arbitrary code execution vulnerability in Lenovo Accelerator Application

Описание

Improper implementation of update mechanism was found in Lenovo Accelerator Application. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via spoofing an update response by man-in-the-middle attack.

---

Technical details

To workaround this vulnerability you have to uninstall Lenovo Accelerator Application. For further instructions you can read original LEN-6718 Lenovo advisory listed below.

Первичный источник обнаружения

• Original advisory
  

Связанные продукты

• Lenovo-Accelerator-Application

Список CVE

• CVE-2016-3944
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com