IBM Lotus Notes Mail Client Remote Code Execution Vulnerability

A vulnerability has been identified in IBM Lotus Notes, which can be exploited by remote user to cause Java applets to be executed on the target user's system. The mail client does not filter 'applet' and 'javascript' tags in HTML-based email messages. A remote user can send a specially crafted email message that, when loaded by the target user, will execute arbitrary Java code on the target system. The code will run with the privileges of the target user.