2012-04-25

CVE-2012-2422 Apr 25, 20:55 LOW POC Monitor

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality. Rated low severity (CVSS 2.9). Public exploit code available and no vendor patch available.

CVE-2012-2425 Apr 25, 20:55 LOW POC Monitor

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2424 Apr 25, 20:55 LOW POC Monitor

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2420 Apr 25, 20:55 LOW POC Monitor

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2423 Apr 25, 20:55 LOW POC Monitor

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, provide different. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-2419 Apr 25, 20:55 LOW POC Monitor

Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used,. Rated low severity (CVSS 1.8). Public exploit code available and no vendor patch available.

CVE-2012-0475 Apr 25, 10:10 LOW Monitor

Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSocket-Origin HTTP headers, which might allow remote attackers. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable. No vendor patch available.

CVE-2012-2421 Apr 25, 20:55 LOW Monitor

Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when. Rated low severity (CVSS 1.8). No vendor patch available.