Adobe Flash Player ByteArray UncompressViaZlibVariant Use-After-Free Exploit

Adobe Flash Player is prone to a use-after-free vulnerability because the ByteArray::UncompressViaZlibVariant method frees an object while leaving a dangling pointer that can be later dereferenced. This vulnerability allows attackers to execute arbitrary code on vulnerable machines by enticing unsuspecting users to visit a website serving a specially crafted SWF Flash file. This vulnerability has been found being actively exploited in-the-wild during January 2015.