229436d8_curity_Updates___Core_Security__Description
[Released Date] 07.01.2015 [Title] Adobe Flash Player ByteArray write method Use-After-Free Exploit [Vulnerabilty] CVE-2015-0359 [Category] Exploits/Client Side [Platform] Windows [Description] 
This module exploits a Use-After-Free vulnerability in Adobe Flash Player. The specific flaw exists when the suscriber is not notified if a ByteArray assigned to the ApplicationDomain is freed from an ActionScript worker. By forcing a reallocation by copying more contents than the original capacity to the shared buffer by using the ByteArray::writeBytes method call, the ApplicationDomain pointer is not updated leading to a use-after-free vulnerability. This allows to overwrite different objects like vectors and finally accomplish remote code execution.
Core Impact Pro Exploits and Security Updates | Core Security