looking for recursion stack overflow exploit

[bukys () cs rochester edu]

While a recursion-induced stack overflow can obviously lead to a
denial-of-service attack, are there any examples of it being turned
into an opportunity for remote execution?

NOTE that I'm talking about a RECURSION stack overflow, NOT a buffer
overflow of some stack variables.

Ideas would be very welcome.

Liudvikas Bukys
University of Rochester