During the client-side Windows installation of Lotus Notes, a notes: URL handler is registered in the registry. An argument injection attack allows an intruder to pass command line arguments to notes.exe, which can lead to execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33660/lotus.inject.txt
Source: https://packetstormsecurity.com/files/33660/lotus.inject.txt.html