CVE-2022-44750: critical vulnerability in HCL Software Domino
HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
HCL Domino has a critical buffer overflow flaw in its KeyView file processor that can be triggered by a specially crafted Lotus Ami Pro file. An attacker can send this malicious file remotely to crash the application or run malicious code without needing to log in.
Stack-based buffer overflow in lasr.dll (KeyView component) allows unauthenticated remote code execution or denial of service via malformed Lotus Ami Pro documents. Attack vector is network-based with no authentication required; vulnerability occurs during file parsing in the document processing pipeline.
In the same product, most dangerous first.