CVE-2009-3518
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 5.5%
from disclosure to weapon0 days
Published on NVDOct 1
1st PoCSep 29
exploitation probability
5.5%top 8% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Argument injection vulnerability in the iim: URI handler in IBMIM.exe in IBM Installation Manager 1.3.2 and earlier, as used in IBM Rational Robot and Rational Team Concert, allows remote attackers to load arbitrary DLL files via the -vm option, as demonstrated by a reference to a UNC share pathname.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/9802⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.