Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and
Adobe AIR before 1.5.2, allows attackers to cause a denial of service
(application crash) or possibly execute arbitrary code via unspecified
vectors, related to a "null pointer vulnerability."