WebKit as used in Google Chrome before 7.0.517.44 webkitgtk before 1.2.6 and other products accesses a frame object after this object has been destroyed which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.