Intuit QuickBooks Online Edition ActiveX Controls Multiple Unspecified Vulnerabilities

Bugtraq ID:	26819
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 11 2007 12:00AM
Updated:	Dec 12 2007 06:32PM
Credit:	The vendor disclosed these issues.
Vulnerable:	Intuit QuickBooks Online Edition 9
Not Vulnerable:	Intuit QuickBooks Online Edition 10

Intuit QuickBooks Online Edition ActiveX Controls Multiple Unspecified Vulnerabilities

Multiple Intuit QuickBooks Online Edition ActiveX controls are prone to multiple unspecified vulnerabilities.

Very few technical details are currently available. We will update this BID as more information emerges.

Versions prior to QuickBooks Online Edition 10 are vulnerable.

Intuit QuickBooks Online Edition ActiveX Controls Multiple Unspecified Vulnerabilities

Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Intuit QuickBooks Online Edition ActiveX Controls Multiple Unspecified Vulnerabilities

Solution:
The vendor released QuickBooks Online Edition 10 to address these issues. Please see the references and contact the vendor for more information.

Intuit QuickBooks Online Edition ActiveX Controls Multiple Unspecified Vulnerabilities

References:

• Important Security Information (Intuit Inc.)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• QuickBooks Online Edition Homepage (Intuit Inc.)
  
• MS Security Bulletin MS07-069 (Microsoft)