VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 14, 2020· Updated Jun 17, 2026

CVE-2020-14268

CVE-2020-14268

Description

A vulnerability in the MIME message handling of the Notes client (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the client or inject code into the system which would execute with the privileges of the client.

Affected products

36
  • Notes client/Notes clientdescription
  • HCL Software/Notes clientllm-create
    Range: 9, 10
  • HCLTech/Notes34 versions
    cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*+ 33 more
    • cpe:2.3:a:hcltech:notes:*:*:*:*:*:*:*:*range: >=9.0,<9.0.1
    • cpe:2.3:a:hcltech:notes:9.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if5:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if6:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp10if7:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp1if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp1if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp2if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp3if4:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp4if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp4if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp5if3:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp7if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp7if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp8if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp9if1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:9.0.1:fp9if2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:-:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp1:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp2:*:*:*:*:*:*
    • cpe:2.3:a:hcltech:notes:10.0.1:fp3:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.