Nuclear Exploit Kit And Flash CVE-2014-0515

This blog analyzes Nuclear Exploit Kit activity exploiting CVE-2014-0515 in Adobe Flash, detailing obfuscated landing pages, AV checks, Flash-version detection, decompiled ActionScript with obfuscated shellcode, and malformed PixelBender shader bytecode that triggers the buffer overflow; the authors note multiple compromised sites redirecting to the EK and recommend patching outdated Flash versions.