It is apparently based on this: WebKit CVE-2012-3748 (http://www.securityfocus.com/bid/56362)