CVE-2012-2425

Exploit

EPSS 0.21%
Published 25.04.2012 20:55:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (application crash) via a long URI.

Affected products Warnungen 0 Metrics 2 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Intuit ≫ Quickbooks Version2009

Microsoft ≫ Internet Explorer

Intuit ≫ Quickbooks Version2010

Microsoft ≫ Internet Explorer

Intuit ≫ Quickbooks Version2011

Microsoft ≫ Internet Explorer

Intuit ≫ Quickbooks Version2012

Microsoft ≫ Internet Explorer

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.21%	0.408

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	1.8	3.2	2.9	AV:A/AC:H/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.kb.cert.org/vuls/id/232979

US Government Resource

http://www.securityfocus.com/archive/1/522138

Exploit

http://www.securityfocus.com/archive/1/522139

Exploit

http://packetstormsecurity.org/files/111403/Intuit-Help-System-Protocol-File-Retrieval.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/75176

https://nvd.nist.gov/vuln/detail/CVE-2012-2425

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2425

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2425

EUVD