Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2012-2420

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to obtain sensitive information via a URI with a % (percent) character as its (1) last or (2) second-to-last character, in situations where a certain "post-URL data" buffer contains a 0x0000 character but a buffer overflow does not occur.

  • Published: Apr 25, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-2420
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 1.8
  • AV:A/AC:H/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
intuit / quickbooks 2009 2009.x
intuit / quickbooks 2010 2010.x
intuit / quickbooks 2011 2011.x
intuit / quickbooks 2012 2012.x