NetSight
IP …
high7.8Known exploitedPublic exploit code

CVE-2011-0609

Adobe Flash Player Unspecified Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-06-08. Federal due date: 2022-06-22.

The impacted product is end-of-life and should be disconnected if still in use.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 10.2.154.13
through 10.1.106.16
AdobeAcrobat
from 9.0 through 9.4.2
Versions 10.0, 10.0.1
AdobeAcrobat Reader
from 9.0 through 9.4.2
Versions 10.0, 10.0.1
AdobeAir
through 2.5.1
OpensuseOpensuse
Versions 11.2, 11.3, 11.4
SuseLinux Enterprise
Versions 10.0, 11.0
GoogleChrome
before 10.0.648.134

References