PT-2014-2469 · Lenovo · Lenovo Thinkpad Bluetooth With Enhanced Data Rate

Haifei Li · Published 2014-01-21 · Updated 2017-08-29 · CVE-2013-1361

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software version 6.4.0.2900 and earlier

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse DLL located in the same folder as a file processed by Lenovo Bluetooth.

Recommendations For versions 6.4.0.2900 and earlier, update to a version later than 6.4.0.2900 to resolve the issue.

Fix

Related Identifiers

CVE-2013-1361

Affected Products

Lenovo Thinkpad Bluetooth With Enhanced Data Rate

References · 6

• http://secunia.com/advisories/51846 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1361 · Security Note
• http://securityfocus.com/bid/57504 · Note
• http://osvdb.org/89483 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/81428 · Note
• http://technet.microsoft.com/en-us/security/msvr/msvr13-001 · Note