CVE-2011-5158

CVE-2011-5158 describes multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components of DATEV Grundpaket Basis CD23.20. These flaws allow local users to gain privileges by placing a malicious DLL (DVBSKNLANG101.dll or DvZediTermSrvInfo004.dll) in a directory containing specific file types, which is then loaded by the vulnerable applications. The vulnerability carries a critical CVSS score of 9.3, indicating a high severity. While the attack vector is local, the complexity is medium, and successful exploitation could lead to complete compromise of confidentiality, integrity, and availability (C:C/I:C/A:C). There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness and attention.