Adobe Flash GradientFill - Use-After-Frees

Exploit for windows platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=557 There are a number of use-after-free vulnerabilities in MovieClip.beginGradientFill. If the spreadMethod or any other string parameter is an object with toString...