That's what I was actually asking about, specifics about this case. I was aware of the previous JS vulns.

Turns out this one was actually a .swf from an abandoned metasploit project.