PT-2012-4036 · Microsoft+1 · Internet Explorer+1

Derek Soeder · Published 2012-04-25 · Updated 2021-07-23 · CVE-2012-2425

Positive Technologies (AI Summary)

CVSS v2.0

1.8

Low

Base vector

AV:A/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a long URI when Internet Explorer is used.

Recommendations For Intuit QuickBooks versions 2009 through 2012, consider updating to a version that is not affected by this issue to prevent potential crashes when using Internet Explorer.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2012-2425

Affected Products

Internet Explorer

Intuit Quickbooks

References · 6

• 🔥 http://securityfocus.com/archive/1/522139 · Exploit
• 🔥 http://securityfocus.com/archive/1/522138 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-2425 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/75176 · Note
• http://packetstormsecurity.org/files/111403/Intuit-Help-System-Protocol-File-Retrieval.html · Note
• http://kb.cert.org/vuls/id/232979 · Note