CVE-2012-2418

Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit…

published April 25, 2012

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a URI with a % (percent) character as its (1) last or (2) second-to-last character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03171 · 87.9th percentile
Published
2012-04-25T20:00Z
EPSS history
Timeline
  • 25 APR 20:00Z
    Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit…
    cvelistv5