CVE-2022-39843

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-39843

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39843.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-39843

Published

2022-09-05T06:02:03Z

Modified

2026-10-28T02:31:00Z

Summary

[none]

Details

123elf Lotus 1-2-3 before 1.0.0rc3 for Linux, and Lotus 1-2-3 R3 for UNIX and other platforms through 9.8.2, allow attackers to execute arbitrary code via a crafted worksheet. This occurs because of a stack-based buffer overflow in the cell format processing routines, as demonstrated by a certain function call from process_fmt() that can be reached via a w3r_format element in a wk3 document.

Database specific

{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39843.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "last_affected":  "9.8.2"
                        }
                    ],
                    "source":  "DESCRIPTION"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/taviso/123elf

Affected ranges

Type

GIT

Repo

https://github.com/taviso/123elf

Events

Introduced

Fixed

349ad68872c9faded19f9f653fbeb7ffd34451b6

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "1-2-3"
                },
                {
                    "fixed":  "1.0.0rc3"
                }
            ],
            "source":  "DESCRIPTION"
        },
        {
            "original_tag":  "v1.0.0rc3",
            "range":  [
                {
                    "fixed":  "349ad68872c9faded19f9f653fbeb7ffd34451b6"
                }
            ],
            "source":  "REFERENCES_TAG"
        }
    ]
}

Affected versions

v1.*

v1.0.0-rc1

v1.0.0rc2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-39843.json"