iDefense Security Advisory 06.07.10 – Remote exploitation of a memory corruption vulnerability in WebKit, as included with multiple vendors’ browsers, could allow an attacker to execute arbitrary code with the privileges of the current user. Google Chrome browsers to parse and render web content. The vulnerability occurs when the a certain property of an HTML element with a caption is reset via JavaScript code. When this occurs, a C++ object is incorrectly accessed after it has been freed. This results in an attacker controlled value being used as a C++ VTABLE, which leads to the execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/90566/06.07.10-3.txt
Source: https://packetstormsecurity.com/files/90566/iDEFENSE-Security-Advisory-2010-06-07.3.html