7 matches found
CVE-2011-5158
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...
CVE-2011-5158
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...
CVE-2011-5158
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...
CVE-2011-5158
Multiple untrusted search path vulnerabilities affect DATEV Grundpaket Basis CD23.20, specifically the DMTGUI2.EXE and DvInesLogFileViewer.Exe components. The issue allows local privilege escalation via a Trojan horse mechanism using one of two DLLs in the current working directory: DVBSKNLANG101...
CVE-2011-5158: Untrusted Search Path
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse 1 DVBSKNLANG101.dll or 2 DvZediTermSrvInfo004.dll file in the current working directory, as demonstrat...
Design/Logic Flaw
The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System aka Grundpaket Basis allows remote attackers to execute arbitrary commands via unspecified vectors...
CVE-2010-0689
The CVE-2010-0689 entry concerns DATEV Base System (Grundpaket Basis) DVBSExeCall.ocx ActiveX Control, version 1.0.0.1, whose ExecuteExe function is vulnerable to remote command execution. The vulnerability is triggered via unspecified vectors in the DVBSExeCall ActiveX control, allowing remote a...