VULNERABILITY INTELLIGENCE

CVE-2009-3518

CVSS score9.3 HIGH
EPSS probability5.48%
CISA KEVNot currently listed
Published2009-10-01
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references