CVE-2010-0919
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes ...
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
Exploit likelihood
What each source reports
NVD Score used
7.6
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
- Record
CVE-2010-0919- CVSS 2.0
- 7.6 High
AV:N/AC:H/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
- Record
CVE-2010-0919- Updated
- 2026-11-02
EUVDEUVD-2010-0944 No score
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
- Record
EUVD-2010-0944- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9hr9-jvm4-mp78 No score
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes ...
Stack-based buffer overflow in the Lotus Domino Web Access ActiveX control in IBM Lotus iNotes (aka Domino Web Access or DWA) 6.5, 7.0 before 7.0.4, 8.0, 8.0.2, and before 229.281 for Domino 8.0.2 FP4 allows remote attackers to execute arbitrary code via a long URL argument to an unspecified method, aka PRAD7JTNHJ.
- Record
GHSA-9hr9-jvm4-mp78- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0919 is a high vulnerability (CVSS 7.6) in Ibm Domino Web Access, published March 3, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.69%, the 93rd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/56555
osvdb.org/62612
securitytracker.com/id?1023662
www-01.ibm.com/support/docview.wss?uid=swg21421808
vupen.com/english/advisories/2010/0496
securityfocus.com/bid/38459
Show 9 moreShow less
secunia.com/advisories/38755
secunia.com/advisories/38744
labs.idefense.com/intelligence/vulnerabilities/display.php?id=857
www-01.ibm.com/support/docview.wss?uid=swg27018109
securityfocus.com/bid/38457
secunia.com/advisories/38681
vupen.com/english/advisories/2010/0495
nvd.nist.gov/vuln/detail/CVE-2010-0919
github.com/advisories/GHSA-9hr9-jvm4-mp78