CVE-2022-44751: HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView

Published Dec 17, 2022

Updated

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44755. This vulnerability applies to software previously licensed by IBM.

Affected Software

39 affected components

hcltech Notes=9.0.1

hcltech Notes=9.0.1-fp10

hcltech Notes=9.0.1-fp10if1

hcltech Notes=9.0.1-fp10if10

hcltech Notes=9.0.1-fp10if2

hcltech Notes=9.0.1-fp10if3

hcltech Notes=9.0.1-fp10if4

hcltech Notes=9.0.1-fp10if5

hcltech Notes=9.0.1-fp10if6

hcltech Notes=9.0.1-fp10if7

hcltech Notes=9.0.1-fp10if8

hcltech Notes=9.0.1-fp1if1

hcltech Notes=9.0.1-fp1if2

hcltech Notes=9.0.1-fp2if1

hcltech Notes=9.0.1-fp2if2

hcltech Notes=9.0.1-fp2if3

hcltech Notes=9.0.1-fp2if4

hcltech Notes=9.0.1-fp3if1

hcltech Notes=9.0.1-fp3if2

hcltech Notes=9.0.1-fp3if3

hcltech Notes=9.0.1-fp3if4

hcltech Notes=9.0.1-fp4if1

hcltech Notes=9.0.1-fp4if2

hcltech Notes=9.0.1-fp5if1

hcltech Notes=9.0.1-fp5if2

hcltech Notes=9.0.1-fp5if3

hcltech Notes=9.0.1-fp7if1

hcltech Notes=9.0.1-fp7if2

hcltech Notes=9.0.1-fp8if1

hcltech Notes=9.0.1-fp9if1

hcltech Notes=9.0.1-fp9if2

hcltech Notes=10.0.1

hcltech Notes=10.0.1-fp1

hcltech Notes=10.0.1-fp2

hcltech Notes=10.0.1-fp3

hcltech Notes=10.0.1-fp4

hcltech Notes=10.0.1-fp5

hcltech Notes=10.0.1-fp6

hcltech Notes=10.0.1-fp7

Event History

Dec 17, 2022

CVE Published

via MITRE·01:48 AM

Data Sourced

via MITRE·01:48 AM

DescriptionSeverity

Dec 19, 2022

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-44751?

CVE-2022-44751 is a vulnerability in HCL Notes that allows a remote attacker to crash the application or execute arbitrary code.

How severe is CVE-2022-44751?

CVE-2022-44751 has a severity score of 7.8, which is considered critical.

Which versions of HCL Notes are affected by CVE-2022-44751?

HCL Notes versions 9.0.1 to 10.0.1 (including various fix pack versions) are affected by CVE-2022-44751.

How can a remote attacker exploit CVE-2022-44751?

A remote attacker can exploit CVE-2022-44751 by creating a crafted Lotus Ami Pro file and tricking a user into opening it in HCL Notes.

Is there a fix available for CVE-2022-44751?

Yes, a fix is available for CVE-2022-44751. It is recommended to update to the latest version of HCL Notes or apply the necessary fix pack.