Chris Clark

**Name of the Vulnerable Software and Affected Versions** HP Palm webOS version 1.4.1 **Description** The issue allows remote attackers to execute arbitrary code via a crafted document. This can be demonstrated by a Word document. **Recommendations** For HP Palm webOS version 1.4.1, consider avoiding the use of the Doc Viewer until a fix is available. As a temporary workaround, restrict the opening of crafted documents to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** HP Palm webOS version 1.4.1 **Description** The issue affects the camera application, allowing local users to overwrite arbitrary files. The exact vectors used for this are not specified. **Recommendations** For HP Palm webOS version 1.4.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Lenovo Rescue and Recovery versions 4.20.0511 through 4.20.0512 Lenovo Rescue and Recovery version 4.20 **Description** A heap-based buffer overflow issue exists in the tvtumin.sys kernel driver, allowing local users to execute arbitrary code via a long file name. **Recommendations** For Lenovo Rescue and Recovery version 4.20, update to a version that addresses this issue. For Lenovo Rescue and Recovery versions 4.20.0511 through 4.20.0512, update to a version that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.