Google Chrome OnItemRemoved Heap Buffer Overflow

This strike exploits a type confusion vulnerability in Google Chrome. Specifically, it is possible to cause a heap buffer overflow in the OnItemremoved function. When this happens a denial of service condition, or potentially remote code execution, may occur in the context of the browser process.