Curtisk

The issue allows remote attackers to execute arbitrary code via text that is improperly handled during the interaction between directionality resolution and layout. This occurs due to a use-after-free vulnerability in DirectionalityUtils.cpp.

The issue allows local users to gain privileges by loading a DLL file in a privileged context, affecting Mozilla Firefox, Thunderbird, and SeaMonkey on Windows.