CVE-2013-1361: Critical severity Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software vulnerability
Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as a file that is processed by Lenovo Bluetooth.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1361?
The severity of CVE-2013-1361 is classified as high due to its potential for arbitrary code execution.
How do I fix CVE-2013-1361?
To fix CVE-2013-1361, update to the latest version of Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software that addresses this vulnerability.
What can attackers achieve with CVE-2013-1361?
Attackers can exploit CVE-2013-1361 to execute arbitrary code through DLL hijacking, compromising the affected system.
Who is affected by CVE-2013-1361?
CVE-2013-1361 affects local users and potentially remote attackers using Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software versions 6.4.0.2900 and earlier.
Is there a workaround for CVE-2013-1361 until a fix is applied?
A possible workaround for CVE-2013-1361 is to avoid placing untrusted DLLs in the same directory as the affected application.