CVE-2012-2421: Path Traversal
First published: Wed Apr 25 2012(Updated: )
Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a full pathname in the URI.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intuit QuickBooks | =2009 | |
| Intuit QuickBooks | =2010 | |
| Intuit QuickBooks | =2011 | |
| Intuit QuickBooks | =2012 | |
| Microsoft Internet Explorer |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intuit
- canonical/intuit quickbooks
- version/intuit quickbooks/2009
- version/intuit quickbooks/2010
- version/intuit quickbooks/2011
- version/intuit quickbooks/2012
- vendor/microsoft
- canonical/microsoft internet explorer