CVE-2007-6387: Intuit Bookkeeping

High severity, CVSS 9.3. EPSS: 38% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickTax, and TurboTax, allow remote attackers to execute arbitrary code via long arguments to the (1) GetHistory, (2) GetSeedQuery, (3) SetSeedQuery, and possibly other methods. NOTE: some of these details are obtained from third party information.

Affected products

• Intuit Bookkeeping: any version
• Intuit Proseries: any version
• Intuit Quickbooks: any version
• Intuit Quicken: any version
• Intuit Quicktax: any version
• Intuit Turbo Tax: any version
• Microsoft Activex: version 4.0.0.42 only
• Vantage Linquistics Answerworks: any version

Published 2007-12-15. Last modified 2026-06-16.