A vulnerability has been discovered in the Mozilla/Netscape Javascript implementation. The condition is triggered when a large integer value (x40000000) is passed to the Array constructor. The implementation of the Array class fails to check for oversized integers, causing memory in the heap to be corrupted.
A vulnerability has been discovered in the Mozilla/Netscape Javascript implementation. The condition is triggered when a large integer value (x40000000) is passed to the Array constructor. The implementation of the Array class fails to check for oversized integers, causing memory in the heap to be corrupted.