|
Intuit QuickBooks Online Edition ActiveX Controls Multiple Vulnerabilities
Multiple Intuit QuickBooks Online Edition ActiveX controls are prone to multiple vulnerabilities, including multiple stack-based buffer-overflow issues and an access-validation issue. Attackers can exploit these issues to execute arbitrary code in the context of an application using the controls (typically Internet Explorer) or to upload and download files in arbitrary locations on the affected computer. Successful exploits will compromise the application and possibly the underlying computer. Failed attacks will likely cause denial-of-service conditions. Versions prior to QuickBooks Online Edition 10 are vulnerable. |
|
|
Privacy Statement |
