High severity · published Mar 15, 2011
CVE-2011-0609
Adobe Flash Player Unspecified Vulnerability
In wildKEV
7.8
CVSS
63.5%
EPSS
Yes
On KEV
Description
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)63.5% · higher than 99% of CVEs
Exploited in the wildYes
CISA KEVListed Jun 8, 2022
Federal remediation dueJun 22, 2022
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
before 10.0.648.134 · source: NVD
AC
Acrobat · Adobe
9.0 through 9.4.2; 10.0; 10.0.1 · source: NVD
AR
Acrobat Reader · Adobe
9.0 through 9.4.2; 10.0; 10.0.1 · source: NVD
AI
Air · Adobe
through 2.5.1 · source: NVD
FP
Flash Player · Adobe
through 10.2.154.13; through 10.1.106.16 · source: NVD, KEV
LE
Linux Enterprise · Suse
10.0; 11.0 · source: NVD
OP
Opensuse · Opensuse
11.2; 11.3; 11.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0609
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0609
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
http://www.securityfocus.com/bid/46860
x_refsource_MISC
http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
vdb-entry
http://www.vupen.com/english/advisories/2011/0732
x_refsource_CONFIRM
http://www.adobe.com/support/security/advisories/apsa11-01.html
third-party-advisory
http://secunia.com/advisories/43751
vdb-entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability