Lucene search

K
cveMitreCVE-2009-0813
HistoryMar 05, 2009 - 2:30 a.m.

CVE-2009-0813

2009-03-0502:30:00
CWE-20
mitre
web.nvd.nist.gov
25
cve-2009-0813
imeraieplugin
activex control
vulnerability
remote execution
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.04

Percentile

92.1%

Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters.

Affected configurations

Nvd
Node
imerateamlinksMatch-
VendorProductVersionCPE
imerateamlinks-cpe:2.3:a:imera:teamlinks:-:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.04

Percentile

92.1%

Related for CVE-2009-0813