ActiveX strikes yet again -- This time its Intuit

[<rms () computerbytesman com>]

Seesh.  Another big software vendor places a backdoor on their customer's
computers that the bad guys can use also. 

 

Richard

 

http://www.kb.cert.org/vuls/id/979638

 

Intuit QuickBooks Online Edition is a version of QuickBooks that is
implemented as an ActiveX control. This ActiveX control contains several
dangerous methods, such as httpGETToFile() and httpPOSTFromFile(). These
methods can be used to download or upload files in arbitrary locations.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.