CVE-2012-2424
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in...
CVE-2012-2424 is a low vulnerability (CVSS 1.8) in Intuit Quickbooks, published April 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. No source names a fixed version.
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that lacks a required delimiter.
Exploit likelihood
What each source reports
NVD Score used
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that lacks a required delimiter.
- Record
CVE-2012-2424- CVSS 2.0
- 1.8 Low
AV:A/AC:H/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that lacks a required delimiter.
- Record
CVE-2012-2424- Updated
- 2026-11-02
EUVDEUVD-2012-2410 No score
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that lacks a required delimiter.
- Record
EUVD-2012-2410- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vp6x-rh2w-5863 No score
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in...
The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a URI that lacks a required delimiter.
- Record
GHSA-vp6x-rh2w-5863- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |