330029 - DoS caused by memory exhaustion

Status: NEW

Description

[Papalia Domenico]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8) Gecko/20051111 Firefox/1.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8) Gecko/20051111 Firefox/1.5

1.To create a page HTML with appropriate Javascript 
2.To open page 


Reproducible: Didn't try

Steps to Reproduce:
<form name="form"><input type="text" name="box"><form>
<script language="javascript">
while(true) { document.form.box.value=document.form.box.value + '%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§%§'; }
</script>




Varying the content of box between § and % the system it goes before in crisis

Comment 1

[Daniel Veditz [:dveditz]]

This kind of memory exhaustion works against all browsers.

Comment 2

[Steffen Wilberg]

Created attachment 215138 [details]
testcase

Comment 3

[Bob Clary [:bc:]]

Moving to DOM.

Comment 4

[Atul Aggarwal]

This kind of attack is possible by scripts only and when this kind of script is used, we get regular alert box saying that script seems to be unresponsive, what would you like to do, stop the execution or continue with it.
Even if you click on continue, you get another alert box after sometime asking the same and hence this does not remains DOS attack as the user is given regular option to stop the script.
In my option, this bug is fixed and this is the best possible way to fix this issue.