Lucene search

K
cve[email protected]CVE-2012-2424
HistoryApr 25, 2012 - 8:55 p.m.

CVE-2012-2424

2012-04-2520:55:01
web.nvd.nist.gov
17
intuit quickbooks
cve-2012-2424
dos
null pointer dereference
security vulnerability
nvd

1.8 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:H/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that lacks a required delimiter.

Affected configurations

NVD
Node
intuitquickbooksMatch2009
OR
intuitquickbooksMatch2010
OR
intuitquickbooksMatch2011
OR
intuitquickbooksMatch2012
AND
microsoftinternet_explorer

1.8 Low

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:A/AC:H/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.8%

Related for CVE-2012-2424