Vulnerability · NVD

CVE-2011-0609

CVE-2011-0609, high severity (CVSS 7.8): 3 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 7.8
Exploitation: 66.8 %
Tracked apps: 3
Still exposed: 0

Published on 2011-03-15

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Attack vector : Local No privileges required

Show raw CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS 66.82% exploit likely percentile 99.2%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Adobe Acrobat Reader (64-bit) Windows winget:Adobe.Acrobat.Reader.64-bit

Affected ≥9.0 ≤9.4.2 Fixed in > 9.4.2 Latest tracked 26.002.21869 patched
Chrome macOS com.google.Chrome

Affected <10.0.648.134 Fixed in 10.0.648.134 Latest tracked - undetermined
Google Chrome Windows winget:Google.Chrome

Affected <10.0.648.134 Fixed in 10.0.648.134 Latest tracked 152.0.7977.65 patched

NVD references 14 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (5)

Vendor	Product	Platform	Versions	CPE 2.3 URI
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	≥9.0 ≤9.4.2	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:10.0:::::::*
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:adobe:acrobat_reader:10.0.1:::::::*
google	chrome All platforms (wildcard)	All platforms (wildcard)	<10.0.648.134	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	<10.0.648.134	cpe:2.3:a:google:chrome::::::::

View on NVD ↗ Advisory · www.adobe.com