One Perfect Bug: Exploiting Type Confusion in Flash(googleprojectzero.blogspot.com)

http://googleprojectzero.blogspot.com/2015/07/one-perfect-bug-exploiting-type_20.html