HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView

HCL Notes has a buffer overflow flaw in a file processing library that can be triggered by opening a specially crafted document. An attacker can use this to crash the application or run malicious code without needing to log in.

Stack-based buffer overflow in lasr.dll (Micro Focus KeyView) within HCL Notes allows remote unauthenticated attackers to achieve arbitrary code execution or denial of service by crafting malicious Lotus Ami Pro files. The vulnerability is triggered during file parsing without requiring authentication or user interaction beyond opening the file.