CVE-2022-44752

HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView

Critical Β· published December 17, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

🚨 A stack-based buffer overflow in HCL Domino could let attackers crash your application or run arbitrary code without breaking a sweat! πŸ”₯ Think of it like a restaurant kitchen where someone passes a recipe that causes the chef to mismanage their ingredients β€” one wrong input can lead to total chaos! 🍽️ If exploited, this vulnerability could allow an attacker to take control of the system, potentially crashing the application or executing malicious code. The stakes are high, as this could lead to data loss, service downtime, and disrupted operations.

Put simply

Think of it like a restaurant kitchen where someone passes a recipe that causes the chef to mismanage their ingredients β€” one wrong input can lead to total chaos! 🍽️ This vulnerability arises in the wp6sr.dll of Micro Focus KeyView, allowing remote unauthenticated attackers to exploit a crafted WordPerfect file that triggers the overflow, compromising the application.

What to do

If exploited, this vulnerability could allow an attacker to take control of the system, potentially crashing the application or executing malicious code. The stakes are high, as this could lead to data loss, service downtime, and disrupted operations. Immediate action is required: update to the latest version of HCL Domino to patch this vulnerability. Regularly audit your systems for unpatched software and educate your team on safe file handling practices. πŸ›‘οΈ You've got this! By taking these steps, you're on your way to securing your application and becoming a security hero! πŸ¦Έβ€β™‚οΈ

The record
Technical detail
CVSS v3.1
9.8 Β· CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00711 Β· 53.0th percentile
Published
2022-12-17T03:27Z
EPSS history
Timeline
  • 17 DEC 03:27Z
    HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView
    cvelistv5