CVE-2022-44755: critical vulnerability in HCL Software Notes
HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
HCL Notes has a buffer overflow flaw in a file processing library that can be triggered by opening a specially crafted document. An attacker can use this to crash the application or run malicious code without needing to log in.
Stack-based buffer overflow in lasr.dll (Micro Focus KeyView) within HCL Notes allows remote unauthenticated attackers to achieve arbitrary code execution or denial of service by crafting malicious Lotus Ami Pro files. The vulnerability is triggered during file parsing without requiring authentication or user interaction beyond opening the file.
In the same product, most dangerous first.