Without the patch, Flash could mistakenly run a piece of code without verifying what type it is. Hackers can exploit the bug to remotely execute code.