There is a use after free vulnerability in the ActionScript 2 TextField.filters array property. Continue reading...