Adobe Flash Player / AIR integer overflow

Integer overflow in intrfcount field of instanceinfo structure...