Skip to content

CVE-2011-0609 Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka...

HighCVSS 7.8 EPSS 63.5% CISA KEV added 2022-06-08 · due 2022-06-22 Exploited in the wild Framework module Public exploit
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

CISA Known Exploited Vulnerability

Date added
2022-06-08
Due date (FCEB)
2022-06-22
Ransomware use
Unknown

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Affected products

ProductAffected versionsFixed in
Adobe flash player <= 10.2.154.13 No fix listed
Adobe flash player <= 10.1.106.16 No fix listed
Adobe acrobat >= 9.0, <= 9.4.2 No fix listed
Adobe acrobat = 10.0 No fix listed
Adobe acrobat = 10.0.1 No fix listed
Adobe Acrobat Reader >= 9.0, <= 9.4.2 No fix listed
Adobe Acrobat Reader = 10.0 No fix listed
Adobe Acrobat Reader = 10.0.1 No fix listed
Adobe air <= 2.5.1 No fix listed
opensuse = 11.2 No fix listed
opensuse = 11.3 No fix listed
opensuse = 11.4 No fix listed
SUSE linux enterprise = 10.0-sp3 No fix listed
SUSE linux enterprise = 11.0-sp1 No fix listed
Google Chrome < 10.0.648.134 10.0.648.134

References