CVE-2008-4589

HIGH 7.2CVE-2008-4589 · Published 15/10/2008 · updated 16/06/2026

In short

CVE-2008-4589 is a HIGH (CVSS 7.2) vulnerability affecting resuce and recovery (lenovo).
Chance of exploitation in the next 30 days (EPSS): 0.53%, higher than 44.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
resuce and recovery lenovo	`= 4.20= 4.20.0511= 4.20.0512`	No fix yet

Description

Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name.

References

secunia.com/advisories/32252 · Vendor Advisory
securityreason.com/securityalert/4421
www-307.ibm.com/pc/support/site.wss/MIGR-4Q2QAK.html · Patch
www-307.ibm.com/pc/support/site.wss/MIGR-70699.html · Patch
isecpartners.com/advisories/2008-02-lenovornr.txt
securityfocus.com/archive/1/497277/100/0/threaded
securityfocus.com/bid/31737 · Patch
securitytracker.com/id
vupen.com/english/advisories/2008/2806
exchange.xforce.ibmcloud.com/vulnerabilities/45839

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free