Lucene search

K
IntuitQuickbooks

6 matches found

CVE
CVE
added 2012/04/25 8:55 p.m.44 views

CVE-2012-2419

Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service (memory consumption) via a URI with multiple refe...

1.8CVSS6.8AI score0.00116EPSS
CVE
CVE
added 2012/04/25 8:55 p.m.38 views

CVE-2012-2423

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote atta...

1.8CVSS6.3AI score0.00132EPSS
CVE
CVE
added 2012/04/25 8:55 p.m.37 views

CVE-2012-2421

Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a f...

1.8CVSS6.8AI score0.00116EPSS
CVE
CVE
added 2012/04/25 8:55 p.m.34 views

CVE-2012-2424

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that l...

1.8CVSS6.8AI score0.00178EPSS
CVE
CVE
added 2012/04/25 8:55 p.m.32 views

CVE-2012-2420

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to obtain sensitive information via a URI with a % (percent) character as its (1) last o...

1.8CVSS6.9AI score0.00163EPSS
CVE
CVE
added 2012/04/25 8:55 p.m.31 views

CVE-2012-2425

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (application crash) via a long URI.

1.8CVSS6.8AI score0.00212EPSS