Quickbooks vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

QU

Product

Quickbooks

by Intuit · last CVE Sep 6, 2012

12

CVEs

0

On KEV

–

Max CVSS

0

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 0High 0Medium 0Low 0

Severity

All severities12 Critical0 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Quickbooks to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2010-5198	–	0%	Sep 6	Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse (1) dbicudtx11.dll, (2) mfc90enu.dll, or (3)… Affected: 2010
CVE-2012-2425	–	1%	Apr 25	The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is… Affected: 2009; 2010; 2011; 2012
CVE-2012-2424	–	1%	Apr 25	The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is… Affected: 2009; 2010; 2011; 2012
CVE-2012-2423	–	1%	Apr 25	The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is… Affected: 2009; 2010; 2011; 2012
CVE-2012-2422	–	1%	Apr 25	Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality Affected: 2009; 2010; 2011; 2012
CVE-2012-2421	–	1%	Apr 25	Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009… Affected: 2009; 2010; 2011; 2012
CVE-2012-2420	–	1%	Apr 25	The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is… Affected: 2009; 2010; 2011; 2012
CVE-2012-2419	–	1%	Apr 25	Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet… Affected: 2009; 2010; 2011; 2012
CVE-2012-2418	–	3%	Apr 25	Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012,… Affected: 2009; 2010; 2011; 2012
CVE-2007-6387	–	38%	Dec 15	Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly… Affected: All versions, or not specified
CVE-2007-0322	–	6%	Sep 5	Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors Affected: All versions, or not specified
CVE-2007-4471	–	5%	Sep 5	Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via… Affected: All versions, or not specified