CVE-2010-3407: Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in...

Security readout for executives and security teams

This flaw lets a specially crafted calendar-invitation email crash or potentially take control of vulnerable IBM Lotus Domino servers. The trigger is an overly long email address in an iCalendar ORGANIZER mailto field. For organizations still running the affected Domino versions, this is urgent because the attack path is remote email delivery. Exposure is limited to IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2, especially servers that accept external calendar invitation emails. The bundle does not identify other affected products. Prioritize remediation where old Domino servers still receive email from outside the organization. This is a remote code execution issue in mail/calendar processing, but urgency depends on whether vulnerable versions remain deployed. Mitigation focus: Upgrade Domino 8.0.x systems to 8.0.2 FP5 or later.; Upgrade Domino 8.5.x systems to 8.5.1 FP2 or later.; Check current IBM or HCL guidance for unsupported Domino deployments..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.