David Baron

The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue allows remote attackers to obtain sensitive information about visited web pages via a timing attack, due to the layout engine executing different code for visited and unvisited links during the processing of Cascading Style Sheets (CSS) token sequences.

The issue is related to multiple unspecified vulnerabilities in the browser engine that can cause a denial of service (crash) due to memory corruption when processing unspecified vectors.

The issue affects the layout engine, allowing remote attackers to cause a denial of service, which may result in memory corruption and a crash, and potentially execute arbitrary code. The attack vectors for this issue are not specified.