229436d8_curity_Updates___Core_Security__Description
[Released Date] 06.18.2015 [Title] Adobe Flash Player AS2 NetConnection Type Confusion Exploit [Vulnerabilty] CVE-2015-0336 [Category] Exploits/Client Side [Platform] Windows [Description] 
This module exploits a Type Confusion vulnerability in Adobe Flash Player. The specific flaw exist in the ActionScript 2 NetConnection class. When a NetConnection method is called with a parameter that is a native function object, its native data can be specified as a Number by the caller, but be interpreted as a pointer. This allows to overwrite different objects like vectors and finally accomplish remote code execution.
Core Impact Pro Exploits and Security Updates | Core Security