System Update(tm) "helps you reduce the time, effort, and expense required to support and maintain the latest drivers, BIOS, and other applications for Think or Lenovo systems". It enables you to get the latest updates from the Lenovo support site, or to automatically schedule your system to be updated. A vulnerability in the way Lenovo's SystemUpdate works allows attackers to spoof the update process which will then be installed seamlessly into the Lenovo's operating system.
http://www.securiteam.com/windowsntf...IP060AOKG.html
