CVEvulnerability

CVE-2011-0609

7.8 HIGH Known exploited Published 2011-03-15 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

Adobe Flash Player Unspecified Vulnerability — Adobe Flash Player

Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).

Added to KEV
2022-06-08
Remediation due
2022-06-22
Ransomware use
Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2011-0609
Status
Analyzed
Published
2011-03-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Affected configurations

• adobe flash player (<= 10.2.154.13) • adobe flash player (<= 10.1.106.16) • adobe acrobat (>= 9.0 <= 9.4.2) • adobe acrobat 10.0 • adobe acrobat 10.0.1 • adobe acrobat reader (>= 9.0 <= 9.4.2) • adobe acrobat reader 10.0 • adobe acrobat reader 10.0.1 • adobe air (<= 2.5.1) • opensuse opensuse 11.2 • opensuse opensuse 11.3 • opensuse opensuse 11.4 • suse linux enterprise 10.0 • suse linux enterprise 11.0 • google chrome (< 10.0.648.134)

References