Mccr8

The issue is caused by buffer overflow, leading to multiple vulnerabilities in the browser engine. Exploitation of these vulnerabilities may allow a remote attacker to cause a denial of service, such as memory corruption or application crash, or possibly execute arbitrary code.

A use-after-free issue in the `nsContentUtils::RemoveScriptBlocker` function allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption via unspecified vectors.

The issue is related to a use-after-free vulnerability that can be triggered by vectors causing failure of an `nsXBLDocumentInfo::ReadPrototypeBindings` function call. This is tied to the cycle collector's access to a hash table containing a stale XBL binding, potentially allowing remote attackers to cause a denial of service or possibly execute arbitrary code.