Bug 445362 (CVE-2008-2000)
Summary: | CVE-2008-2000 WebKit: DoS via JavaScript that calls document.write in an infinite loop | ||
---|---|---|---|
Product: | [Other] Security Response | Reporter: | Tomas Hoger <thoger> |
Component: | vulnerability | Assignee: | Red Hat Product Security <security-response-team> |
Status: | CLOSED NOTABUG | QA Contact: | |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | unspecified | CC: | mtasaka, peter |
Target Milestone: | --- | Keywords: | Security |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2000 | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-05-06 14:26:38 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Tomas Hoger
2008-05-06 14:20:37 UTC
This seems to be WebKit issue, not specific to Safari. Malicious JavaScript can cause huge memory and CPU resources consumption, leading to a browser crash. We do not treat this kind of client application crashes as security issues, so I'm closing this as notabug. If this get addressed upstream (e.g. by implementing some check that will allow user to interrupt JavaScript execution after some time, same as gecko does), we'll follow shortly. |