CVE-2022-44755: HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView

Published Dec 17, 2022

Updated

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in CVE-2022-44751. This vulnerability applies to software previously licensed by IBM.

Affected Software

39 affected components

hcltech Notes=9.0.1

hcltech Notes=9.0.1-fp10

hcltech Notes=9.0.1-fp10if1

hcltech Notes=9.0.1-fp10if10

hcltech Notes=9.0.1-fp10if2

hcltech Notes=9.0.1-fp10if3

hcltech Notes=9.0.1-fp10if4

hcltech Notes=9.0.1-fp10if5

hcltech Notes=9.0.1-fp10if6

hcltech Notes=9.0.1-fp10if7

hcltech Notes=9.0.1-fp10if8

hcltech Notes=9.0.1-fp1if1

hcltech Notes=9.0.1-fp1if2

hcltech Notes=9.0.1-fp2if1

hcltech Notes=9.0.1-fp2if2

hcltech Notes=9.0.1-fp2if3

hcltech Notes=9.0.1-fp2if4

hcltech Notes=9.0.1-fp3if1

hcltech Notes=9.0.1-fp3if2

hcltech Notes=9.0.1-fp3if3

hcltech Notes=9.0.1-fp3if4

hcltech Notes=9.0.1-fp4if1

hcltech Notes=9.0.1-fp4if2

hcltech Notes=9.0.1-fp5if1

hcltech Notes=9.0.1-fp5if2

hcltech Notes=9.0.1-fp5if3

hcltech Notes=9.0.1-fp7if1

hcltech Notes=9.0.1-fp7if2

hcltech Notes=9.0.1-fp8if1

hcltech Notes=9.0.1-fp9if1

hcltech Notes=9.0.1-fp9if2

hcltech Notes=10.0.1

hcltech Notes=10.0.1-fp1

hcltech Notes=10.0.1-fp2

hcltech Notes=10.0.1-fp3

hcltech Notes=10.0.1-fp4

hcltech Notes=10.0.1-fp5

hcltech Notes=10.0.1-fp6

hcltech Notes=10.0.1-fp7

Event History

Dec 17, 2022

CVE Published

via MITRE·01:57 AM

Data Sourced

via MITRE·01:57 AM

DescriptionSeverity

Dec 19, 2022

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID of this HCL Notes vulnerability?

The vulnerability ID is CVE-2022-44755.

What is the affected software for this vulnerability?

The affected software is HCL Notes version 9.0.1 and 10.0.1.

What is the severity of CVE-2022-44755?

The severity of CVE-2022-44755 is critical.

How can an attacker exploit this vulnerability?

An attacker can exploit this vulnerability by crafting a malicious Lotus Ami Pro file.

Is there a fix available for CVE-2022-44755?

Yes, there is a fix available. Please refer to the following link for more information: [Link to the fix](https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260)