NVD

Id
44231  
Name
CVE-2012-2421  
Description
Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, might allow remote attackers to read arbitrary files in ZIP archives via a full pathname in the URI.  
Reject
 
CVSS Version
2  
CVSS Score
1.8  
Severity
Low  
CVSS Base Score
1.8  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.2  
CVSS Vector
(AV:A/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-04-25  
Modified Date
2012-04-27  
Seq
2012-2421  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
222136 44231 CVE-2012-2421 VU#232979  View
222137 44231 CVE-2012-2421 20120330 Intuit Help System Protocol File Retrieval  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26455 JVNDB-2012-002162 Intuit QuickBooks の intu-help-qb ハンドラにおける絶対パストラバーサルの脆弱性 Intuit QuickBooks の HelpAsyncPluggableProtocol.dll 内の intu-help-qb ハンドラには、Internet Explorer が使用される場合、絶対パストラバーサルの脆弱性が存在します。 CVE-2012-2421 55659 CVE-2012-2421 44231 1.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002162.html 2012-04-25 2012-04-27 View