CVE-2017-3759: Input Validation
The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3759?
CVE-2017-3759 has been classified as a high severity vulnerability due to its potential for exploitation through remote code execution.
How do I fix CVE-2017-3759?
To fix CVE-2017-3759, update the Lenovo Service Framework application to the latest version provided by Lenovo.
What types of attacks are possible due to CVE-2017-3759?
CVE-2017-3759 allows for man-in-the-middle attacks, which may lead to remote code execution on affected Android devices.
Which software is affected by CVE-2017-3759?
CVE-2017-3759 impacts the Lenovo Service Framework application on Android devices.
How can I protect my device from CVE-2017-3759?
To protect your device from CVE-2017-3759, always ensure you are running the latest security updates and patches from Lenovo.