PT-2014-2469 · Lenovo · Lenovo Thinkpad Bluetooth With Enhanced Data Rate

Haifei Li · Publicado 2014-01-21 · Atualizado 2017-08-29 · CVE-2013-1361

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software version 6.4.0.2900 and earlier

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse DLL located in the same folder as a file processed by Lenovo Bluetooth.

Recommendations For versions 6.4.0.2900 and earlier, update to a version later than 6.4.0.2900 to resolve the issue.

Correção

Identificadores relacionados

CVE-2013-1361

Produtos afetados

Lenovo Thinkpad Bluetooth With Enhanced Data Rate

Referências · 6

• http://securityfocus.com/bid/57504 · Nota
• http://secunia.com/advisories/51846 · Aviso do Fabricante
• http://osvdb.org/89483 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81428 · Nota
• http://technet.microsoft.com/en-us/security/msvr/msvr13-001 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-1361 · Nota de Segurança