{"id":"CVE-2010-3407","url":"https://www.cyber-defence.io/tools/cve/CVE-2010-3407","generatedAt":"2026-10-27T17:44:48.127Z","title":"Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long…","description":"Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.","published":"2010-09-16T21:00:02.000Z","lastModified":"2026-06-16T23:22:43.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"2.0","score":9.3,"severity":"HIGH","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cwe":["CWE-119"],"affected":["ibm/lotus domino"],"epss":{"score":0.41475,"percentile":0.98669,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":2,"verified":true,"firstPublished":"2010-09-14","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":17151,"kind":"exploit","title":"IBM Lotus Domino iCalendar - MAILTO Buffer Overflow (Metasploit)","url":"https://www.exploit-db.com/exploits/17151","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/17151.rb","file":"exploits/windows/remote/17151.rb","published":"2011-04-04","added":"2011-04-11","updated":"2011-04-11","author":"Metasploit","type":"remote","platform":"windows","port":25,"verified":true,"codes":["CVE-2010-3407","OSVDB-68040"],"tags":"Metasploit Framework (MSF)","aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/"},{"edbId":15005,"kind":"exploit","title":"IBM Lotus Domino iCalendar - Email Address Stack Buffer Overflow","url":"https://www.exploit-db.com/exploits/15005","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/15005.txt","file":"exploits/multiple/remote/15005.txt","published":"2010-09-14","added":"2010-09-14","updated":"2016-11-17","author":"A. Plaskett","type":"remote","platform":"multiple","port":null,"verified":true,"codes":["CVE-2010-3407","OSVDB-68040"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":"http://www.exploit-db.com/screenshots/idlt15500/screen-shot-2011-04-01-at-34805-pm.png","referenceUrl":"http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 41.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/","source":"cve@mitre.org"},{"url":"http://labs.mwrinfosecurity.com/files/Advisories/mwri_lotus-domino-ical-stack-overflow_2010-09-14.pdf","tags":["Exploit"],"source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/41433","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://securitytracker.com/id?1024448","source":"cve@mitre.org"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21446515","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/52f9218288b51dcb852576c600741f72?OpenDocument","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/613a204806e3f211852576e2006afa3d?OpenDocument","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/af36678d60bd74288525778400534d7c?OpenDocument","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/15005","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/513706/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/43219","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2010/2381","tags":["Vendor Advisory"],"source":"cve@mitre.org"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-177/","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61790","source":"cve@mitre.org"},{"url":"http://labs.mwrinfosecurity.com/advisories/lotus_domino_ical_stack_buffer_overflow/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.mwrinfosecurity.com/files/Advisories/mwri_lotus-domino-ical-stack-overflow_2010-09-14.pdf","tags":["Exploit"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/41433","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1024448","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21446515","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/52f9218288b51dcb852576c600741f72?OpenDocument","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/613a204806e3f211852576e2006afa3d?OpenDocument","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www-10.lotus.com/ldd/r5fixlist.nsf/8d1c0550e6242b69852570c900549a74/af36678d60bd74288525778400534d7c?OpenDocument","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/15005","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/513706/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/43219","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/2381","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-177/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/61790","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-3407","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}