CVE-2010-0689

Published: Feb 26, 2010Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The ExecuteExe method in the DVBSExeCall Control ActiveX control 1.0.0.1 in DVBSExeCall.ocx in DATEV Base System (aka Grundpaket Basis) allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected (1)

Products: Datev: Base System

Datev

1 product

Base System

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Datev Base System	All versions

References (18)

http://osvdb.org/62564

Source: cve@mitre.org

http://secunia.com/advisories/38716

Source: cve@mitre.org

Vendor Advisory

http://sotiriu.de/adv/NSOADV-2010-003.txt

Source: cve@mitre.org

http://sotiriu.de/demos/videos/nso-2010-003.html

Source: cve@mitre.org

Exploit

http://www.datev.de/info-db/1080162

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/509743/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/38415

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2010/0474

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/56530

Source: cve@mitre.org

http://osvdb.org/62564