Actually, Chrome has been sandboxing Flash since last December. http://blog.chromium.org/2010/12/rolling-out-sandbox-for-ado...

So even if the exploit is using vulnerability in Flash, it still needs to escape the Flash sandbox in Chrome.