CVE-2012-2425

Exploit

EPSS 0.21%
Veröffentlicht 25.04.2012 20:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (application crash) via a long URI.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Intuit ≫ Quickbooks Version2009

Microsoft ≫ Internet Explorer

Intuit ≫ Quickbooks Version2010

Microsoft ≫ Internet Explorer

Intuit ≫ Quickbooks Version2011

Microsoft ≫ Internet Explorer

Intuit ≫ Quickbooks Version2012

Microsoft ≫ Internet Explorer

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.21%	0.408

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	1.8	3.2	2.9	AV:A/AC:H/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.kb.cert.org/vuls/id/232979

US Government Resource

http://www.securityfocus.com/archive/1/522138

Exploit

http://www.securityfocus.com/archive/1/522139

Exploit

http://packetstormsecurity.org/files/111403/Intuit-Help-System-Protocol-File-Retrieval.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/75176

https://nvd.nist.gov/vuln/detail/CVE-2012-2425

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2425

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2425

EUVD