CVE-2011-5158: Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in...

Security readout for executives and security teams

This is a local privilege-escalation issue in DATEV Grundpaket Basis CD23.20 components. If a user opens supported DATEV-related files from a directory containing attacker-placed DLLs, the program may load the wrong code. Business risk depends on whether this legacy DATEV package is still installed and used on workstations. Exposure appears limited to systems running DATEV Grundpaket Basis CD23.20 with the affected DMTGUI2.EXE or DvInesLogFileViewer.Exe components. Risk is higher on shared workstations, file shares, or environments where users open .dmt, .adl, .c02, .dof, or .jrf files from untrusted locations. Treat this as a targeted legacy software exposure, not an internet-wide emergency. Prioritize confirmation of DATEV usage, restrict risky file-handling workflows, and seek vendor-supported remediation. Escalate if the software is present on privileged finance or tax workstations. Mitigation focus: Inventory endpoints for DATEV Grundpaket Basis CD23.20 and the affected executables.; Check DATEV or archived advisory guidance for fixed versions or supported mitigations.; Avoid opening DATEV-related files from untrusted folders, archives, or network shares..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.