WebKit as used in Google Chrome before 7.0.517.44 webkitgtk before 1.2.6 and other products does not properly handle large text areas which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted HTML document.