I see I didn't see the Avast team tag next to his post reading from my small phone screen. Yep, that is excellent news.
With that settled, it is a bit disconcerting that all version of IE and Firefox were vulnerable given that the various sandboxes. IE 10,11 in Windows 8 has its own flash wrapped around its protected mode sandbox, and Adobe sandboxed Flash for Firefox on Vista and up. So in addition to patching Flash, I assume IE has an exploit they need to patch.
I know sandbox aren't the end all, but it seems the hackers did in the IE and Adobe sandboxes at the same time.