Blog: New Flash Player 0-day (CVE-2014-0515) used in watering-hole attacksWe received a sample of the first exploit on April 14, while a sample of the second came on April 16. The first exploit was initially recorded by KSN on April 9, when it was detected by a general heuristic signature. There were numerous subsequent detections on April 14 and 16. In other words, we succeeded in detecting a previously unknown threat using heuristics.
Source:
Blog: New Flash Player 0-day (CVE-2014-0515) used in watering-hole attacks