# CVEs published 2012-04-25

39 CVEs were published on April 25, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2418](https://cve.now/CVE-2012-2418.md): Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll (no CVSS)
- [CVE-2012-2419](https://cve.now/CVE-2012-2419.md): Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit Quick (no CVSS)
- [CVE-2012-2420](https://cve.now/CVE-2012-2420.md): The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 thro (no CVSS)
- [CVE-2012-2421](https://cve.now/CVE-2012-2421.md): Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggablePr (no CVSS)
- [CVE-2012-2422](https://cve.now/CVE-2012-2422.md): Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile func (no CVSS)
- [CVE-2012-2423](https://cve.now/CVE-2012-2423.md): The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 thro (no CVSS)
- [CVE-2012-2424](https://cve.now/CVE-2012-2424.md): The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 thro (no CVSS)
- [CVE-2012-2425](https://cve.now/CVE-2012-2425.md): The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 thro (no CVSS)
- [CVE-2012-0467](https://cve.now/CVE-2012-0467.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird (no CVSS)
- [CVE-2012-0468](https://cve.now/CVE-2012-0468.md): The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 allows remote attackers to ca (no CVSS)
- [CVE-2012-0469](https://cve.now/CVE-2012-0469.md): Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace function in Mozilla Firefox 4.x through 11. (no CVSS)
- [CVE-2012-0470](https://cve.now/CVE-2012-0470.md): Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::LightPixel function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x b (no CVSS)
- [CVE-2012-0471](https://cve.now/CVE-2012-0471.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, (no CVSS)
- [CVE-2012-0472](https://cve.now/CVE-2012-0472.md): The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbi (no CVSS)
- [CVE-2012-0473](https://cve.now/CVE-2012-0473.md): The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through (no CVSS)
- [CVE-2012-0474](https://cve.now/CVE-2012-0474.md): Cross-site scripting (XSS) vulnerability in the docshell implementation in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, (no CVSS)
- [CVE-2012-0475](https://cve.now/CVE-2012-0475.md): Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and SeaMonkey before 2.9 do not properly construct the Origin and Sec-WebSoc (no CVSS)
- [CVE-2012-0477](https://cve.now/CVE-2012-0477.md): Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 thr (no CVSS)
- [CVE-2012-0478](https://cve.now/CVE-2012-0478.md): The texImage2D implementation in the WebGL subsystem in Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 th (no CVSS)
- [CVE-2012-0479](https://cve.now/CVE-2012-0479.md): Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thunderbird 5.0 through 11.0, Thunderbird ESR 10.x before 10.0.4, and SeaM (no CVSS)
- [CVE-2012-1126](https://cve.now/CVE-2012-1126.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1127](https://cve.now/CVE-2012-1127.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1128](https://cve.now/CVE-2012-1128.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1129](https://cve.now/CVE-2012-1129.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1130](https://cve.now/CVE-2012-1130.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1131](https://cve.now/CVE-2012-1131.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, on 64-bit platforms allows remote attackers to ca (no CVSS)
- [CVE-2012-1132](https://cve.now/CVE-2012-1132.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1133](https://cve.now/CVE-2012-1133.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1134](https://cve.now/CVE-2012-1134.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1135](https://cve.now/CVE-2012-1135.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1136](https://cve.now/CVE-2012-1136.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1137](https://cve.now/CVE-2012-1137.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1138](https://cve.now/CVE-2012-1138.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1139](https://cve.now/CVE-2012-1139.md): Array index error in FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to c (no CVSS)
- [CVE-2012-1140](https://cve.now/CVE-2012-1140.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1141](https://cve.now/CVE-2012-1141.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1142](https://cve.now/CVE-2012-1142.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1143](https://cve.now/CVE-2012-1143.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2012-1144](https://cve.now/CVE-2012-1144.md): FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of serv (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-04-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.