This vulnerability is an instance of a use after free vulnerability the sound object. Specifically, the vulnerability is triggered by a crafted SWF file which manipulates sound decompressor object in a way that leads to a flaw during reallocation of an underlying buffer. It triggers access violation exception because of a dangling reference left as a consequence of freeing the decompressor object. |