Vulnerabilities > CVE-2008-1338 - Numeric Errors vulnerability in Perforce Server

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
network
low complexity
perforce
CWE-189

Summary

The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a server-DiffFile command with an integer value within a certain range, which causes a loop until all memory is exhausted.

Vulnerable Configurations

Part Description Count
Application
Perforce
1

Common Weakness Enumeration (CWE)