Live › vulnerability › CVE-2011-0609
Go to dashboardAdobe Flash Player has an unspecified flaw that lets remote attackers run code or crash the player. The CISA known-exploited catalog lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Adobe Flash Player | vendor | – | – |
| adobe flash player | vendor | <= 10.2.154.13 | – |
| adobe flash player | vendor | <= 10.1.106.16 | – |
| adobe acrobat | vendor | >= 9.0, <= 9.4.2 | – |
| adobe acrobat | vendor | = 10.0 | – |
| adobe acrobat | vendor | = 10.0.1 | – |
| adobe acrobat reader | vendor | >= 9.0, <= 9.4.2 | – |
| adobe acrobat reader | vendor | = 10.0 | – |
| adobe acrobat reader | vendor | = 10.0.1 | – |
| adobe air | vendor | <= 2.5.1 | – |
| opensuse | vendor | = 11.2 | – |
| opensuse | vendor | = 11.3 | – |
| opensuse | vendor | = 11.4 | – |
| suse linux enterprise | vendor | = 10.0 | – |
| suse linux enterprise | vendor | = 11.0 | – |
| google chrome | vendor | < 10.0.648.134 | 10.0.648.134 |
Check whether Adobe Flash Player is installed on any machine (for example, look for FlashPlayer plugin files or the Flash Player entry in installed software).
Remove Adobe Flash Player from any system still using it, since the product is end-of-life and CISA says to disconnect it if still in use.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
This page as .md · .json · in your agent: get_signal("CVE-2011-0609")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.