CVE-2012-2420

CVE-2012-2420 affects Intuit QuickBooks 2009–2012 where the HelpAsyncPluggableProtocol.dll (intu-help-qb) handlers used with Internet Explorer may accidentally disclose sensitive information. The issue arises when processing a URI containing a percent character as its last or second-to-last chara...

CVE-2012-2425

The CVE-2012-2425 entry concerns Intuit QuickBooks 2009–2012, specifically the intu-help-qb (Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll. When users browse with Internet Explorer, a crafted long URI can trigger a denial of service (application crash) vi...

PT-2012-4032

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012 Description The issue is related to an absolute path traversal vulnerability in the intu-help-qb handlers. This might allow remote attackers to read arbitrary files in ZIP archives via a full pathna...