The issue allows remote attackers to cause a denial of service, potentially leading to the execution of arbitrary code, via a web page with embedded CLSIDs referencing certain COM objects. This results in memory corruption due to the instantiation of these COM objects, including those from various DLL files such as `devenum.dll`, `diactfrm.dll`, `wmm2filt.dll`, `fsusd.dll`, `dmdskmgr.dll`, `browsewm.dll`, `browseui.dll`, `shell32.dll`, `mshtml.dll`, `inetcfg.dll`, `infosoft.dll`, `query.dll`, `syncui.dll`, `clbcatex.dll`, `clbcatq.dll`, `comsvcs.dll`, and `msconf.dll`.