Willem Pinckaers

The issue is related to insufficient access control in the protected memory subsystem, which may allow a privileged user to potentially enable information disclosure via local access. This could lead to the exposure of protected information.

A race condition exists in the Inter-process Communication (IPC) implementation, allowing attackers to bypass intended sandbox restrictions.

The issue allows remote attackers to execute arbitrary code via unknown vectors related to CSS "style handling" and a length value. This was demonstrated by Vincenzo Iozzo, Willem Pinckaers, and Ralf-Philipp Weinmann during a Pwn2Own competition at CanSecWest 2011. The vulnerability is related to integer overflow in WebKit.

The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, or possibly execute arbitrary code of their choice. This is due to a heap-based buffer overflow.