Adobe Flash URLStream.readObject Use-After-Free
There is a use-after-free in URLStream.readObject...
Windows Kernel NtGdiGetTextExtentExW Out-Of-Bounds Memory Read
The included proof of concept crashes...
[dos] – Adobe Flash – URLStream.readObject Use-After-Free
Adobe Flash – URLStream.readObject Use-After-Free
[dos] – Adobe Flash – TextField.maxChars Use-After-Free
Adobe Flash – TextField.maxChars Use-After-Free