Hi there.........i have found a buffer overflow situation in a windows baesed mail daemon........and i want to exploit it to run arbitrary commands..........i have decided to test it on my local machine so as to execute notepad.exe ............now the problem being that i couldn't successfully code the exploit for this....:-(...........i was trying CreateProcessA to run notepd.exe............i examined this API and found that it pushes 10 parameters before going in for a call............i tried maually adding code in debugger , but the call CreateProcessA doesn't give any results........
so can anyone guide me about how to achieve this ( about createproces API).......or is there any other API/method by which i can achieve it????

Thnx in advance.
theeta.