The 2013 Pwnie Nominee For Best Client-Side Bug

Adobe Flash Player RegExp Overflow (CVE-2013-0634)

Credit: Unknown

What zero-day gets remote code execution with advanced heap manipulation and highly targeted attacks? This bug!