Security Advisory
CVE-2012-2422
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality.