Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/36462
http://www.securityfocus.com/bid/25544