The issue is related to the auto-downloading feature, which has insufficient content restrictions. This allows a malicious auto-downloaded file to trigger the loading of crafted auto-downloaded files as native code DLLs. A malicious file can also override the user's configuration defaults. Furthermore, executable bytecode in a malicious file can set configuration variables to values that result in unwanted native code DLLs being loaded, leading to a sandbox escape.