PT-2012-4036 · Microsoft+1 · Internet Explorer+1

Derek Soeder · Publicado 2012-04-25 · Atualizado 2021-07-23 · CVE-2012-2425

Positive Technologies (AI Summary)

CVSS v2.0

1.8

Baixa

Vetor base

AV:A/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a long URI when Internet Explorer is used.

Recommendations For Intuit QuickBooks versions 2009 through 2012, consider updating to a version that is not affected by this issue to prevent potential crashes when using Internet Explorer.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-2425

Produtos afetados

Internet Explorer

Intuit Quickbooks

Referências · 6

• 🔥 http://securityfocus.com/archive/1/522139 · Exploit
• 🔥 http://securityfocus.com/archive/1/522138 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75176 · Nota
• http://packetstormsecurity.org/files/111403/Intuit-Help-System-Protocol-File-Retrieval.html · Nota
• http://kb.cert.org/vuls/id/232979 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2425 · Nota de Segurança