CVEvulnerability
CVE-2009-0813
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters.
Affected configurations
• imera teamlinks
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/34103 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0591 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49028 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/8144 www.exploit-db.com
- http://secunia.com/advisories/34103 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/0591 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49028 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/8144 www.exploit-db.com