Framesets allow web pages to hold other pages inside them. Certain frameset constructs are not handled correctly when the page is unloaded, causing a memory corruption. To inject code, additional techniques will have to be employed.
Disclosure Timeline:
2011/05/25 Coordinated release of advisory