Skip to content
OpenAdvisories
High WID-SEC-2022-2396 3 CVEs

HCL Notes: Mehrere Schwachstellen

Published Dec 22, 2022 · Updated Dec 22, 2022 · de-DE

Vendor: HCL Software Product: Notes Product: Notes < 10.0.1 FP8 Product: Notes < 9.0.1 FP10 IF11 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL Notes ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service zu verursachen.

Product

Notes ist eine Groupware Software, die unter anderem auch als E-Mail Programm genutzt wird.

Vulnerabilities 3

  • Critical 9.8
    CVE-2022-44751

    HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView

    HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is differe…

    HCL Software Notes
  • Critical 9.8
    CVE-2022-44753

    HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView

    HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file.  This vulnerabil…

    HCL Software Notes
  • Critical 9.8
    CVE-2022-44755

    HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView

    HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is differe…

    HCL Software Notes

Revision history

  1. #1

    Initiale Fassung

References

  • HCL vom 2022-12-16
    https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0100260