AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-3407

HIGH · CVSS 9.3 EPSS 41.48% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-09-16 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 41.5% probability of exploitation in the next 30 days. It may be remotely exploitable.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2010-3407
Severity
HIGH
CVSS
9.3
EPSS
41.48%

Original NVD Description

Stack-based buffer overflow in the MailCheck821Address function in nnotes.dll in the nrouter.exe service in the server in IBM Lotus Domino 8.0.x before 8.0.2 FP5 and 8.5.x before 8.5.1 FP2 allows remote attackers to execute arbitrary code via a long e-mail address in an ORGANIZER:mailto header in an iCalendar calendar-invitation e-mail message, aka SPR NRBY7ZPJ9V.