CVE-2012-2421
- State
- Published
- Severity
- Not scored
- Published
- Apr 25, 2012
- Updated
- Aug 6, 2024
- Reserved
- Apr 25, 2012
Description
Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a full pathname in the URI.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- quickbooks-intuit-info-disclosure(75172)vdb-entry
- 20120330 Intuit Help System Protocol File Retrievalmailing-list
- VU#232979third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.