# CVE-2011-0609: Adobe Flash Player Unspecified Vulnerability

> CVE-2011-0609: Adobe Flash Player Unspecified Vulnerability. CVSS 7.8 (CVSS 3.1), in CISA KEV.

Canonical: https://rewindex.com/cve/CVE-2011-0609
Last updated: 2025-10-22T00:05:49Z

- Published: 2011-03-15 17:00 UTC · Updated: 2025-10-22 00:05 UTC · Assigner: adobe
- CVSS: 7.8 (CVSS 3.1) · Severity: High · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS: 63.5%, 99th percentile (scored 2026-10-25)
- CISA KEV: yes, added 2022-06-08, federal due date 2022-06-22, ransomware use: Unknown

## Description

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

## CISA required action

The impacted product is end-of-life and should be disconnected if still in use.

## Affected vendors and products

- Adobe: Flash Player

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2011-0609)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2011-0609)
- [http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html](http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html)
- [http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates\_15.html](http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html)
- [http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html](http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html)
- [http://secunia.com/advisories/43751](http://secunia.com/advisories/43751)
- [http://secunia.com/advisories/43757](http://secunia.com/advisories/43757)
- [http://secunia.com/advisories/43772](http://secunia.com/advisories/43772)
- [http://secunia.com/advisories/43856](http://secunia.com/advisories/43856)
- [http://securityreason.com/securityalert/8152](http://securityreason.com/securityalert/8152)
- [https://exchange.xforce.ibmcloud.com/vulnerabilities/66078](https://exchange.xforce.ibmcloud.com/vulnerabilities/66078)
- [https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147](https://oval.cisecurity.org/repository/search/definition/oval%253Aorg.mitre.oval%253Adef%253A14147)
- [http://www.adobe.com/support/security/advisories/apsa11-01.html](http://www.adobe.com/support/security/advisories/apsa11-01.html)
- [http://www.adobe.com/support/security/bulletins/apsb11-06.html](http://www.adobe.com/support/security/bulletins/apsb11-06.html)
- [http://www.kb.cert.org/vuls/id/192052](http://www.kb.cert.org/vuls/id/192052)
- [http://www.redhat.com/support/errata/RHSA-2011-0372.html](http://www.redhat.com/support/errata/RHSA-2011-0372.html)
- [http://www.securityfocus.com/bid/46860](http://www.securityfocus.com/bid/46860)
- [http://www.securitytracker.com/id?1025210](http://www.securitytracker.com/id?1025210)
- [http://www.securitytracker.com/id?1025211](http://www.securitytracker.com/id?1025211)
- [http://www.securitytracker.com/id?1025238](http://www.securitytracker.com/id?1025238)
- [http://www.vupen.com/english/advisories/2011/0655](http://www.vupen.com/english/advisories/2011/0655)
- [http://www.vupen.com/english/advisories/2011/0656](http://www.vupen.com/english/advisories/2011/0656)
- [http://www.vupen.com/english/advisories/2011/0688](http://www.vupen.com/english/advisories/2011/0688)
- [http://www.vupen.com/english/advisories/2011/0732](http://www.vupen.com/english/advisories/2011/0732)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2011-0609 · Markdown: https://rewindex.com/cve/CVE-2011-0609.md · JSON: https://rewindex.com/api/v1/cves/CVE-2011-0609 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:01:48.504Z