This document presents a new, and just mitigated, technique to leverage the JIT-ed code to serve as an info leaker and therefore bypass the security mitigation ASLR.
You can download it from the following link: https://packetstormsecurity.com/files/download/122486/Flash_Jit_InfoLeak_Gadgets.pdf
Source: https://packetstormsecurity.com/files/122486/Flash-JIT-Spraying-Info-Leak-Gadgets.html