Skip to content
OpenAdvisories
High WID-SEC-2022-2360 3 CVEs

HCL Domino: Mehrere Schwachstellen ermöglichen Denial of Service und Ausführung von beliebigem Code

Published Dec 18, 2022 · Updated Dec 18, 2022 · de-DE

Vendor: HCL Software Product: Domino < 9.0.1 FP10 IF9

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL Domino ausnutzen, um einen Denial of Service Angriff durchzuführen und beliebigen Code zur Ausführung zu bringen.

Product

Domino bietet Unternehmens-E-Mail, sowie Kollaborations-Funktionen und eine Anwendungs-Plattform.

Vulnerabilities 3

  • Critical 9.8
    CVE-2022-44750

    HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.

    HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is differ…

    HCL Software Domino
  • Critical 9.8
    CVE-2022-44752

    HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView

    HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file.  This vulnerabi…

    HCL Software Domino
  • Critical 9.8
    CVE-2022-44754

    HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.

    HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is differ…

    HCL Software Domino

Revision history

  1. #1

    Initiale Fassung

References