Nokia Web Browser for S60 Infinite Array Sort Denial of Service Vulnerability

Bugtraq ID:	31703
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 10 2008 12:00AM
Updated:	Oct 15 2008 06:07PM
Credit:	Luca Carettoni
Vulnerable:	Nokia Web Browser for S60 0 Nokia Browser 0
Not Vulnerable:

Nokia Web Browser for S60 Infinite Array Sort Denial of Service Vulnerability

Nokia Web Browser for S60 is prone to a denial-of-service vulnerability when handling malicious HTML files.

A successful exploit of this issue allows remote attackers to consume excessive system resources in the affected browser, which will cause the application to crash and deny service to legitimate users. Attackers may also be able to run arbitrary code, but this has not been confirmed.

Nokia Web Browser for S60 Infinite Array Sort Denial of Service Vulnerability

The following example exploit is available:

• /data/vulnerabilities/exploits/31703.html

Nokia Web Browser for S60 Infinite Array Sort Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Nokia Web Browser for S60 Infinite Array Sort Denial of Service Vulnerability

References:

• Nokia Web Browser for S60 Homepage (Nokia)
  
• [LC-2008-04] Nokia Browser Array Sort Denial Of Service Vulnerability ([email protected])