CVE-2010-3407

This is a Metasploit module exploiting a buffer overflow in IBM Lotus Domino iCalendar via a malformed 'ORGANIZER;mailto' header. It achieves remote code execution by overwriting EIP and leveraging ROP gadgets to bypass DEP on Windows systems.

The exploit demonstrates a stack-based buffer overflow in IBM Lotus Domino's iCalendar email address handling via a crafted email with an overly long ORGANIZER mailto address. The PoC triggers the vulnerability by overwriting the saved return address, leading to arbitrary code execution in the context of the nrouter.exe process.

This Metasploit module exploits a buffer overflow in IBM Lotus Domino iCalendar via a long 'ORGANIZER;mailto' header, leading to remote code execution. It includes multiple targets for different Windows versions and uses ROP techniques to bypass DEP.