CVE-2012-2419

CVE-2012-2419 affects Intuit QuickBooks 2009–2012, specifically the intu-help-qb (Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll. The issue is a memory leak that occurs when Internet Explorer is used, allowing a remote attacker to cause a denial-of-service...

CVE-2012-2421

Absolute path traversal vulnerability in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a...

CVE-2012-2423

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote...

CVE-2012-2425

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service application crash via a long URI...

CVE-2012-2419

Memory leak in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service memory consumption via a URI with multiple...

CVE-2012-2424

CVE-2012-2424 affects Intuit QuickBooks 2009–2012 and specifically targets the intu-help-qb (Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll. The vulnerability is a denial-of-service via a crafted URI that lacks a required delimiter, triggering a NULL point...

CVE-2012-2423

The CVE-2012-2423 entry concerns Intuit QuickBooks 2009–2012 where the intu-help-qb (Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll, when used with Internet Explorer, respond differently to remote requests based on whether a ZIP pathname is valid. This beh...

CVE-2012-2420

CVE-2012-2420 affects Intuit QuickBooks 2009–2012 where the HelpAsyncPluggableProtocol.dll (intu-help-qb) handlers used with Internet Explorer may accidentally disclose sensitive information. The issue arises when processing a URI containing a percent character as its last or second-to-last chara...

CVE-2012-2424

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a URI that lac...

CVE-2012-2425

The CVE-2012-2425 entry concerns Intuit QuickBooks 2009–2012, specifically the intu-help-qb (Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll. When users browse with Internet Explorer, a crafted long URI can trigger a denial of service (application crash) vi...

CVE-2012-2422

CVE-2012-2422 affects QuickBooks 2009–2012. The vulnerability arises when using the qbwc://docontrol/GetCompanyFile functionality, which may allow remote attackers to obtain pathname information. The provided documents describe the vulnerability as an information disclosure risk but do not specif...

CVE-2012-2421

CVE-2012-2421 describes an absolute path traversal vulnerability in the Intuit QuickBooks Help System (HelpAsyncPluggableProtocol.dll) used by the intu-help-qb handlers. Affected products are QuickBooks 2009–2012 when Internet Explorer is used. The issue could allow an attacker to read arbitrary ...

Intuit QuickBooks Installed

QuickBooks, accounting software for small businesses, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58847; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"Intuit...

Intuit QuickBooks Help System Multiple Vulnerabilities

The version of QuickBooks installed on the remote host has multiple vulnerabilities. Versions 2008 through 2012 have multiple vulnerabilities in the help system that could result in information disclosure or memory corruption. A remote attacker could exploit these issues by tricking a user into...

Intuit QuickBook сode execution

Code execution and memory corruption in intu-help-qb5: protocol handler...

Multiple vulnerabilities in Intuit QuickBooks

Overview Intuit QuickBooks 2009 through 2012 have been reported to contain a file disclosure and heap corruption vulnerability. Description Derek Soeder's vulnerability report states the following:Intuit Help System Protocol File Retrieval The vulnerability described in this document can be...

Intuit QuickBooks Online Edition ActiveX控件多个远程安全漏洞

BUGTRAQ ID: 25544 CVECAN ID: CVE-2007-4471,CVE-2007-0322 QuickBooks Online Edition是一款在线财务软件。 QuickBooks Online Edition的ActiveX控件处理在处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果用户受骗打开了恶意HTML文档的话，QuickBooks Online Edition...

CVE-2007-4471

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...

CVE-2007-0322

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4471

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the 1 httpGETToFile, 2 httpPOSTFromFile, and possibly other methods, probably involving path traversal...