iDefense Security Advisory 03.02.10 – Remote exploitation of a stack-based buffer overflow vulnerability in IBM Corp.’s Lotus Domino Web Access ActiveX control could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerable function takes an attacker-controlled URL, and copies it into a fixed-size stack buffer. No validation checks are performed on the length of the URL. By passing in a long URL string, it is possible to trigger a stack-based buffer overflow, resulting in the execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/86846/03.02.10-1.txt
Source: https://packetstormsecurity.com/files/86846/iDEFENSE-Security-Advisory-2010-03-02.1.html