CVE-2011-0609

State: Published
Severity: 7.8 High
Published: Mar 15, 2011
Updated: Oct 22, 2025
Reserved: Jan 20, 2011

Description

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

46860vdb-entry
http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
ADV-2011-0732vdb-entry
http://www.adobe.com/support/security/advisories/apsa11-01.html
43751third-party-advisory
oval:org.mitre.oval:def:14147vdb-entrysignature
ADV-2011-0656vdb-entry
1025211vdb-entry
SUSE-SR:2011:005vendor-advisory
adobe-flash-authplay-ce(66078)vdb-entry
ADV-2011-0655vdb-entry
1025210vdb-entry
43856third-party-advisory
VU#192052third-party-advisory
43772third-party-advisory
http://www.adobe.com/support/security/bulletins/apsb11-06.html
8152third-party-advisory
1025238vdb-entry
http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
RHSA-2011:0372vendor-advisory
43757third-party-advisory
ADV-2011-0688vdb-entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0609government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.