CVE-2012-2424

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a URI that lac...

CVE-2012-2425

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service application crash via a long URI...

CVE-2012-2422

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality...

CVE-2012-2423

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote...

CVE-2012-2418

CVE-2012-2418 : Heap-based buffer overflow in the intu-help-qb (Intuit Help System Async Pluggable Protocol) handlers of HelpAsyncPluggableProtocol.dll used by QuickBooks 2009–2012 (on Windows with Internet Explorer) allows remote attackers to trigger memory corruption or potentially execute arbi...

PT-2012-4030

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012 Description A memory leak issue exists in the intu-help-qb handlers within HelpAsyncPluggableProtocol.dll. This occurs when Internet Explorer is used and a URI contains multiple references to the sa...

PT-2012-4033

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012 Description The issue allows remote attackers to obtain pathname information. This is achieved via the "qbwc://docontrol/GetCompanyFile" functionality. Recommendations For versions 2009 through 2012...

PT-2012-4031

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012 Description The issue concerns the intu-help-qb handlers in HelpAsyncPluggableProtocol.dll. It might allow remote attackers to obtain sensitive information via a URI with a % percent character as it...

PT-2012-4034

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012 Description The issue concerns the intu-help-qb handlers in HelpAsyncPluggableProtocol.dll. When Internet Explorer is used, these handlers provide different responses to remote requests based on the...

PT-2012-4036

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a long URI when Internet Explorer is used. Recommendations For Intuit QuickBooks...

CVE-2012-2418: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service memory corruption or possibly...

CVE-2012-2423: Exposure of Sensitive Information to an Unauthorized Actor

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote...

CVE-2012-2425: Improper Input Validation

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service application crash via a long URI...

CVE-2012-2424: Undefined Security Weakness

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service NULL pointer dereference and application crash via a URI that lac...

CVE-2012-2421: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a...

CVE-2012-2420: Exposure of Sensitive Information to an Unauthorized Actor

The intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to obtain sensitive information via a URI with a % percent character as its 1 last or 2...

CVE-2012-2419: Undefined Security Weakness

Memory leak in the intu-help-qb aka Intuit Help System Async Pluggable Protocol handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service memory consumption via a URI with multiple...

CVE-2012-2422: Exposure of Sensitive Information to an Unauthorized Actor

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality...

PT-2012-4029

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012 Description The issue is related to a heap-based buffer overflow in the intu-help-qb handlers in HelpAsyncPluggableProtocol.dll. This occurs when Internet Explorer is used and a URI with a % percent...

PT-2012-4032

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012 Description The issue is related to an absolute path traversal vulnerability in the intu-help-qb handlers. This might allow remote attackers to read arbitrary files in ZIP archives via a full pathna...