CVE-2018-9063
HIGHLenovo System Update < 5.07.0072 - Local Buffer Overflow via MapDrv User ID or Password
Title source: llmDescription
MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/104125
Vendor Advisory x_refsource_confirm
https://support.lenovo.com/us/en/solutions/LEN-19625
Scores
CVSS v3
7.8
EPSS
0.0009
EPSS Percentile
25.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (1)
lenovo/system_update
< 5.07.0072
Published
May 04, 2018
Tracked Since
Feb 18, 2026