CVE-2010-0919

Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.

• CWE-119

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857
• http://secunia.com/advisories/38681Vendor Advisory
• http://secunia.com/advisories/38744Vendor Advisory
• http://secunia.com/advisories/38755Vendor Advisory
• http://securitytracker.com/id?1023662
• http://www-01.ibm.com/support/docview.wss?uid=swg21421808Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27018109Vendor Advisory
• http://www.osvdb.org/62612
• http://www.securityfocus.com/bid/38457
• http://www.securityfocus.com/bid/38459
• http://www.vupen.com/english/advisories/2010/0495Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0496Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56555
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=857
• http://secunia.com/advisories/38681Vendor Advisory
• http://secunia.com/advisories/38744Vendor Advisory
• http://secunia.com/advisories/38755Vendor Advisory
• http://securitytracker.com/id?1023662
• http://www-01.ibm.com/support/docview.wss?uid=swg21421808Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27018109Vendor Advisory
• http://www.osvdb.org/62612
• http://www.securityfocus.com/bid/38457
• http://www.securityfocus.com/bid/38459
• http://www.vupen.com/english/advisories/2010/0495Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0496Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56555

Published

Mar 3, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0913Unspecified vulnerability in the Oracle Applications Manager…
• CVE-2010-0914Unspecified vulnerability in Oracle Sun Convergence 1.0 allo…
• CVE-2010-0915Unspecified vulnerability in the Oracle Advanced Product Cat…
• CVE-2010-0916Unspecified vulnerability in Oracle OpenSolaris 10 allows lo…
• CVE-2010-0917Stack-based buffer overflow in VBScript in Microsoft Windows…
• CVE-2010-0918Multiple unspecified vulnerabilities in the UltraLite functi…
• CVE-2010-0920Cross-site scripting (XSS) vulnerability in IBM Lotus iNotes…
• CVE-2010-0921Cross-site request forgery (CSRF) vulnerability in IBM Lotus…
• CVE-2010-0922Unspecified vulnerability in secldapclntd in IBM AIX 5.3 wit…
• CVE-2010-0923Race condition in workspace/krunner/lock/lockdlg.cc in the K…
• CVE-2010-0924cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe …
• CVE-2010-0925cfnetwork.dll 1.450.5.0 in CFNetwork, as used by safari.exe …