ExternalInterface.call() Example. From: http://livedocs.adobe.com/flash/9.0/ActionScriptLangRefV3/flash/external/ExternalInterface.html#includeExamplesSummary

PoC for: Flash ExternalInterface.call() JavaScript Injection - 8th March 2011

SWF file: http://0me.me/demo/adobeflash/ExternalInterface.call/ExternalInterfaceExample.swf

HTML file: http://0me.me/demo/adobeflash/ExternalInterface.call/demo.html

Ref:

http://soroush.secproject.com/blog/

http://lcamtuf.blogspot.com/2011/03/other-reason-to-beware-of.html