{"id":"CVE-2009-0813","aliases":["EUVD-2009-0811","GHSA-3pvr-773m-5pcf"],"status":"published","title":"Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54)...","description":"Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.09085,"percentile":0.95333,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-20"],"published":"2009-03-05T02:00:00Z","modified":"2026-06-16T23:05:52Z","exploits":[{"source":"exploitdb","id":"EDB-8144","title":"Imera ImeraIEPlugin - ActiveX Control Remote Code Execution","type":"remote","platform":"windows","date":"2009-03-03","verified":true,"url":"https://www.exploit-db.com/exploits/8144"}],"products":[{"vendor":"imera","product":"teamlinks"}],"references":[{"url":"https://www.exploit-db.com/exploits/8144","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49028","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/34103","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0591","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0813"},{"url":"https://github.com/advisories/GHSA-3pvr-773m-5pcf"}],"sources":{"cve":[{"id":"CVE-2009-0813","description":"Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters.","status":"published","published":"2009-03-05T02:00:00Z","modified":"2024-08-07T04:48:52.208Z","updated_at":"2026-11-02T14:33:25.896677Z"}],"euvd":[{"id":"EUVD-2009-0811","description":"Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters.","status":"published","published":"2009-03-05T02:00:00Z","modified":"2024-08-07T04:48:52Z","updated_at":"2026-11-03T01:39:24.312317Z"}],"ghsa":[{"id":"GHSA-3pvr-773m-5pcf","title":"Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54)...","description":"Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters.","status":"published","published":"2022-05-02T03:18:37Z","modified":"2023-01-31T05:07:16Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:49:10.75849Z"}],"nvd":[{"id":"CVE-2009-0813","description":"Insecure method vulnerability in the ImeraIEPlugin ActiveX control (ImeraIEPlugin.dll 1.0.2.54) in Imera TeamLinks Client allows remote attackers to force the download and execution of arbitrary URLs via modified DownloadProtocol, DownloadHost, DownloadPort, and DownloadURI parameters.","status":"published","published":"2009-03-05T02:30:00.53Z","modified":"2026-06-16T23:05:52.11Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:34.44527Z"}]}}