CVE-2022-44755

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44751.  This vulnerability applies to software previously licensed by IBM.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@hcl.com

Published

2022-12-19

Last modified

2025-04-17

Weaknesses

CWE-787

Affected products

• Notes (Hcl Software)
• Notes (Hcltech)

References

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260