Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2012-2423

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different responses to remote requests depending on whether a ZIP pathname is valid, which allows remote attackers to obtain potentially sensitive information about the installation path and product version via a series of requests involving the Msxml2.XMLHTTP object.

  • Published: Apr 25, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-2423
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 1.8
  • AV:A/AC:H/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
intuit / quickbooks 2009 2009.x
intuit / quickbooks 2010 2010.x
intuit / quickbooks 2011 2011.x
intuit / quickbooks 2012 2012.x