CVEvulnerability

CVE-2009-3518

9.3 HIGH Published 2009-10-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-10-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.

Affected configurations

• ibm installation manager (<= 1.3.2) • ibm installation manager 1.0 • ibm installation manager 1.2.1 • ibm installation manager 1.3.0 • ibm installation manager 1.3.1

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References