VERSION
Chrome Version:58.0.3029.110 stable
Operating System: Windows 10 enterprise

VULNERABILITY DETAILS
chrome version 58 disabled flash execution by default
if user want to use flash,he must click the flash area and confirm the notice window
to open it.
but this bug shows a way to make a redirection between two pages
without any notice to open it and make an attack.
need user iteract --- click jacking(make a small game)
click about 300 times and the flash could execute

REPRODUCTION CASE

please put them on a local webserver, i used apache + php
and use the new.html to performance this attack
the result.png shows the attack result