The researchers had discovered the flaws in February but gave time to Lenovo for patching the same.
The researchers said that the vulnerabilities affect the Lenovo System Update software version 5.6.0.27 and earlier.
Lenovo System Update validates all system update files as they are downloaded from the Lenovo servers.
The Lenovo security advisory states that users need to update the Lenovo software to version 5.06.0034 or later.
Click OK when prompted that new version is available.
If you own a Lenovo PC or Laptop, you might download the patch fromhere.
source: www.techworm.net