1174283 - Malicious Instagram Java Script Hang and Freeze Vulnerability

Status: RESOLVED WORKSFORME

(Core :: JavaScript Engine, defect)

Description

[Gopal Raha]

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:38.0) Gecko/20100101 Firefox/38.0
Build ID: 20150605094246

Steps to reproduce:

1. Open the Mozilla Firefox Browser and access the Instagram (https://www.instagram.com).
2. After Scrolling the Hang of Instagram in Mozilla Firefox browser Scroll is locked and browser cannot be responded.
3. This Hang is Due to Unresponsive 'FEEDPAGE.js' Java Script.
4. Mozilla Firefox Browser cannot be responded due to Instagram JS Hang.
5. CPU load Goes to 100% load due to Instagram JS Hang.
6. More than 500 MB RAM is Consumed by Mozilla Firefox Browser due to Instagram JS Hang.


For More Information See the Screenshots Attachments


Actual results:

The Mozilla Firefox is under Hang and Freezes also CPU load Goes to 100% load and More than 500 MB RAM is Consumed by Mozilla Firefox Browser.


Expected results:

This may continue the Blue Screen errors due to the Kernel Crash of Windows Operating System due to this errors causes DDOS attacks on Windows OS due to this JS venerability.

Comment 1

[Gopal Raha]

Attachment: Step-I (Hang of Instagarm in mozilla firefox browser Scroll is locked and browser cannot be responded).PNG

Comment 2

[Gopal Raha]

Attachment: Step-II (Hang Due to Unresponsive FEEDPAGE Java Script).PNG

Comment 3

[Gopal Raha]

Attachment: Step-III (Mozilla Firefox Browser cannot be responded due to Instagram JS Hang).PNG

Comment 4

[Gopal Raha]

Attachment: Step-IV (CPU load Goes to 100% due to Instagram JS Hang).PNG

Comment 5

[Gopal Raha]

Attachment: Step-V (More than 500 MB RAM is Consumed by Mozilla Firefox Browser due to Instagram JS Hang .PNG

Comment 6

[Abe - QA (:Abe_LV)]

User Agent 	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Firefox/45.0
Nightly 45.0a1 Build ID: 20151214030220
and Firefox 42.0

Gopal, Thank you for reporting this.

Are you still having the issue in the latest version ?

Comment 7

[Abe - QA (:Abe_LV)]

User Agent 	Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:46.0) Gecko/20100101 Firefox/46.0
Version 	46.0a1
Build ID 	20160114030207
Channel 	nightly 

I do not reproduce this issue.  The CPU usage is less than 5%. 
Closing this as incomplete due to inactivity and lack of response from the reporter. 
Please feel free to reopen the bug if the issue still reproduces on a current build. Thanks

Comment 8

[Abe - QA (:Abe_LV)]

Correcting the status as works for me:
The issue is not reproducible for me in the given steps.
If the issue still reproduces consistently on a current build, please feel free to reopen it. Appreciated.