Update: proof of concept on GitHub published. Adobe Flash Player (including the Red Hat flash-plugin browser plug-in on RHEL 6) has a use-after-free flaw that lets an attacker run arbitrary code, crash the plug-in, or disclose sensitive information using a specially crafted SWF file. The attacker needs no login but must get the victim to open a page or document containing the malicious file; public exploit code exists and attacks using thi...