Filtered by vendor Perforce
Subscribe
Total
25 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-1338 | 1 Perforce | 1 Perforce Server | 2024-11-21 | 7.8 HIGH | N/A |
The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a server-DiffFile command with an integer value within a certain range, which causes a loop until all memory is exhausted. | |||||
CVE-2008-1303 | 1 Perforce | 1 Perforce Server | 2024-11-21 | 5.0 MEDIUM | N/A |
The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference. | |||||
CVE-2008-1302 | 2 Microsoft, Perforce | 2 Windows, Perforce Server | 2024-11-21 | 5.0 MEDIUM | N/A |
The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) server-DiffFile or (2) server-ReleaseFile command with a large integer value, which is used in an array initialization calculation, and leads to invalid memory access. | |||||
CVE-2007-6349 | 1 Perforce | 1 P4web | 2024-11-21 | 7.8 HIGH | N/A |
P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0. | |||||
CVE-2007-0100 | 1 Perforce | 1 Perforce Client | 2024-11-21 | 10.0 HIGH | N/A |
The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite arbitrary files by modifying the client config file on the server, or by operating a malicious server. |