# CVEs published 2012-04-25

39 CVEs were published on April 25, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2418](https://cve.now/CVE-2012-2418.md): Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in… (no CVSS)
- [CVE-2012-2419](https://cve.now/CVE-2012-2419.md): Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit… (no CVSS)
- [CVE-2012-2420](https://cve.now/CVE-2012-2420.md): The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009… (no CVSS)
- [CVE-2012-2421](https://cve.now/CVE-2012-2421.md): Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in… (no CVSS)
- [CVE-2012-2422](https://cve.now/CVE-2012-2422.md): Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile… (no CVSS)
- [CVE-2012-2423](https://cve.now/CVE-2012-2423.md): The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009… (no CVSS)
- [CVE-2012-2424](https://cve.now/CVE-2012-2424.md): The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009… (no CVSS)
- [CVE-2012-2425](https://cve.now/CVE-2012-2425.md): The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009… (no CVSS)
- [CVE-2012-0467](https://cve.now/CVE-2012-0467.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4… (no CVSS)
- [CVE-2012-0468](https://cve.now/CVE-2012-0468.md): The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to… (no CVSS)
- [CVE-2012-0469](https://cve.now/CVE-2012-0469.md): Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through… (no CVSS)
- [CVE-2012-0470](https://cve.now/CVE-2012-0470.md): Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x… (no CVSS)
- [CVE-2012-0471](https://cve.now/CVE-2012-0471.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through… (no CVSS)
- [CVE-2012-0472](https://cve.now/CVE-2012-0472.md): The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0… (no CVSS)
- [CVE-2012-0473](https://cve.now/CVE-2012-0473.md): The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0… (no CVSS)
- [CVE-2012-0474](https://cve.now/CVE-2012-0474.md): Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before… (no CVSS)
- [CVE-2012-0475](https://cve.now/CVE-2012-0475.md): Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and… (no CVSS)
- [CVE-2012-0477](https://cve.now/CVE-2012-0477.md): Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0… (no CVSS)
- [CVE-2012-0478](https://cve.now/CVE-2012-0478.md): The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0… (no CVSS)
- [CVE-2012-0479](https://cve.now/CVE-2012-0479.md): Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and… (no CVSS)
- [CVE-2012-1126](https://cve.now/CVE-2012-1126.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1127](https://cve.now/CVE-2012-1127.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1128](https://cve.now/CVE-2012-1128.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1129](https://cve.now/CVE-2012-1129.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1130](https://cve.now/CVE-2012-1130.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1131](https://cve.now/CVE-2012-1131.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to… (no CVSS)
- [CVE-2012-1132](https://cve.now/CVE-2012-1132.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1133](https://cve.now/CVE-2012-1133.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1134](https://cve.now/CVE-2012-1134.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1135](https://cve.now/CVE-2012-1135.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1136](https://cve.now/CVE-2012-1136.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1137](https://cve.now/CVE-2012-1137.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1138](https://cve.now/CVE-2012-1138.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1139](https://cve.now/CVE-2012-1139.md): Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to… (no CVSS)
- [CVE-2012-1140](https://cve.now/CVE-2012-1140.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1141](https://cve.now/CVE-2012-1141.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1142](https://cve.now/CVE-2012-1142.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1143](https://cve.now/CVE-2012-1143.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2012-1144](https://cve.now/CVE-2012-1144.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2012-04-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.