There is an information leak in Adobe Flash in the Transform.colorTranform getter. If the constructor for ColorTransform is overwritten with a getter using addProperty, this getter will execute when fetching the constructor, which can then free the MovieClip containing the Tranform.
7063d81c59980eddcec6a6549e6a9eed2656761e3a99db80b256f91f6bbbdf51