Lucene search
MitreCVE-2012-2425HistoryApr 25, 2012 - 8:55 p.m.
CVE-2012-2425
2012-04-2520:55:01
CWE-20
mitre
web.nvd.nist.gov
21
cve-2012-2425
intuit quickbooks
intu-help-qb
dos
application crash
remote attack
CVSS2
1.8
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:H/Au:N/C:N/I:N/A:P
AI Score
6.8
Confidence
High
EPSS
0.008
Percentile
82.0%
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (application crash) via a long URI.
Affected configurations
Node
intuitquickbooksMatch2009
ORintuitquickbooksMatch2010
ORintuitquickbooksMatch2011
ORintuitquickbooksMatch2012
microsoftinternet_explorer
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intuit | quickbooks | 2009 | cpe:2.3:a:intuit:quickbooks:2009:*:*:*:*:*:*:* |
| intuit | quickbooks | 2010 | cpe:2.3:a:intuit:quickbooks:2010:*:*:*:*:*:*:* |
| intuit | quickbooks | 2011 | cpe:2.3:a:intuit:quickbooks:2011:*:*:*:*:*:*:* |
| intuit | quickbooks | 2012 | cpe:2.3:a:intuit:quickbooks:2012:*:*:*:*:*:*:* |
| microsoft | internet_explorer | * | cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-2425
2012-04-25 20:00:00
nvd
nvd
CVE-2012-2425
2012-04-25 20:55:01
prion
prion
Design/Logic Flaw
2012-04-25 20:55:00
nessus
nessus
Intuit QuickBooks Help System Multiple Vulnerabilities
2012-04-24 00:00:00
CVSS2
1.8
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:A/AC:H/Au:N/C:N/I:N/A:P
AI Score
6.8
Confidence
High
EPSS
0.008
Percentile
82.0%
Related for CVE-2012-2425