VULNERABILITY INTELLIGENCE

CVE-2009-0813

CVSS score9.3 HIGH
EPSS probability9.09%
CISA KEVNot currently listed
Published2009-03-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references