CVE-2012-2424

Name of the Vulnerable Software and Affected Versions Intuit QuickBooks versions 2009 through 2012

Description The issue concerns the intu-help-qb handlers in HelpAsyncPluggableProtocol.dll. When Internet Explorer is used, remote attackers can cause a denial of service, leading to a NULL pointer dereference and application crash, via a URI that lacks a required delimiter.

Recommendations For Intuit QuickBooks versions 2009 through 2012, consider restricting the use of Internet Explorer or avoiding URIs that lack required delimiters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.