The issue is related to a memory buffer overflow, which can be exploited by a remote attacker to execute arbitrary code by creating a malicious web page. Some memory safety bugs have shown evidence of memory corruption, and it is presumed that these could be exploited to run arbitrary code with sufficient effort.