CVE-2022-39843

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-39843

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39843.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-39843

Published

2022-09-05T06:02:03Z

Modified

2026-07-15T01:49:15.166964862Z

Summary

[none]

Details

123elf Lotus 1-2-3 before 1.0.0rc3 for Linux, and Lotus 1-2-3 R3 for UNIX and other platforms through 9.8.2, allow attackers to execute arbitrary code via a crafted worksheet. This occurs because of a stack-based buffer overflow in the cell format processing routines, as demonstrated by a certain function call from processfmt() that can be reached via a w3rformat element in a wk3 document.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39843.json",
    "cna_assigner": "mitre",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "9.8.2"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}

References

Affected packages

Git / github.com/taviso/123elf

Affected ranges

Type

GIT

Repo

https://github.com/taviso/123elf

Events

Introduced

Fixed

349ad68872c9faded19f9f653fbeb7ffd34451b6

Database specific

{
    "extracted_events": [
        {
            "introduced": "1-2-3"
        },
        {
            "fixed": "1.0.0rc3"
        }
    ],
    "source": "DESCRIPTION"
}

Affected versions

v1.*

v1.0.0-rc1

v1.0.0rc2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39843.json"