The issue is related to a double-free error when handling a CTreeNode object, allowing remote attackers to execute arbitrary code by accessing already freed memory through a specially crafted website. This could corrupt memory, enabling an attacker to execute code in the context of the current user.