Description
The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) server-DiffFile or (2) server-ReleaseFile command with a large integer value, which is used in an array initialization calculation, and leads to invalid memory access.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://aluigi.org/poc/perforces.zip ↗
- http://www.securityfocus.com/bid/28108 ↗
- http://www.securityfocus.com/archive/1/489179/100/0/threaded ↗
- http://secunia.com/advisories/29231 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41016 ↗
- http://aluigi.altervista.org/adv/perforces-adv.txt ↗
- http://securityreason.com/securityalert/3735 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41363 ↗