← Back

CVE-2012-2419

nvd nist
Published: Apr 25, 2012Modified: Apr 29, 2026

JSON object

Loading...
1.8
Vector
AV:A/AC:H/Au:N/C:N/I:N/A:P
Exploitability: 3.2 / Impact: 2.9
Source: NVD

Description

Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service (memory consumption) via a URI with multiple references to the same name-value pair.

Affected (4)

Products: Intuit: Quickbooks
Intuit
1 product
Quickbooks
Configuration A
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Intuit
Quickbooks
Version 2009
Quickbooks
Version 2010
Quickbooks
Version 2011
Quickbooks
Version 2012
Running on/withPlatform Versions
Microsoft
Internet Explorer
All versions

Related CWEs

CWE-399
CWE-399

References (6)

Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.