Nokia Browser HTML Denial of Service Vulnerability

Bugtraq ID:	19484
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 11 2006 12:00AM
Updated:	Aug 11 2006 11:25PM
Credit:	Qode is credited with the discovery of this issue.
Vulnerable:	Nokia Browser 0
Not Vulnerable:

Nokia Browser HTML Denial of Service Vulnerability

Nokia Browser is prone to a denial-of-service vulnerability when handling malicious HTML files.

A successful exploit of this issue allows attackers to consume excessive system resources in the affected browser, resulting in the application crashing, denying service to legitimate users. Remote code execution may be possible, but this has not been confirmed.

Nokia Browser HTML Denial of Service Vulnerability

The following HTML code is sufficient to trigger this issue:

• /data/vulnerabilities/exploits/nokia-aug11-2006.html

Nokia Browser HTML Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Nokia Browser HTML Denial of Service Vulnerability

References:

• Nokia Homepage (Nokia)
  
• Nokia Browser Crash (Qode)