CVE-2011-0609

HIGH KEV

Adobe Flash Player AVM Bytecode Verification Vulnerability

Title source: metasploit

Description

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/17027
metasploit WORKING POC GOOD
by bannedit, Unknown · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flashplayer_avm.rb

References (23)

... and 3 more

Scores

CVSS v3 7.8
EPSS 0.9208
EPSS Percentile 99.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CISA KEV 2022-06-08
VulnCheck KEV 2011-03-15
InTheWild.io 2018-10-30
ENISA EUVD EUVD-2011-0627
Status published
Products (14)
adobe/acrobat 10.0
adobe/acrobat 10.0.1
adobe/acrobat 9.0 - 9.4.2
adobe/acrobat_reader 10.0
adobe/acrobat_reader 10.0.1
adobe/acrobat_reader 9.0 - 9.4.2
adobe/air < 2.5.1
adobe/flash_player < 10.2.154.13
google/chrome < 10.0.648.134
opensuse/opensuse 11.2
... and 4 more
Published Mar 15, 2011
KEV Added Jun 08, 2022
Tracked Since Feb 18, 2026