CVE-2011-0609 Adobe Flash Player Unspecified
Remote attackers can execute arbitrary code or cause denial of service via crafted Flash content in Adobe Flash Player and Reader.
- Exploited in the wild
- Since 8 Jun 2022
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2011-0609?
CVE-2011-0609 is a high-severity code injection vulnerability in Adobe Acrobat, published on 15 Mar 2011. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
Which versions are affected by CVE-2011-0609?
It affects 7 products.
Linux distribution packages (3)
flash-plugin Red Hat:rhel_extras:5::client | All versions | 0:10.2.153.1-1.el5 |
flash-plugin Red Hat:rhel_extras:5::server | All versions | 0:10.2.153.1-1.el5 |
flash-plugin Red Hat:rhel_extras:6 | All versions | 0:10.2.153.1-1.el6 |
Products include Adobe Acrobat, Adobe Acrobat Reader, Adobe Air, Adobe Flash Player, Google Chrome, Opensuse Opensuse and 1 more.
How do I fix CVE-2011-0609?
Apply the vendor's patch. US federal agencies must fix it by 22 Jun 2022.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2011-0609 being exploited?
Yes. Attackers have exploited CVE-2011-0609 in the wild since at least 8 Jun 2022.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in Adobe Acrobat
Sources
Also known as GHSA-g9g3-3gv9-454q, RHSA-2011:0372.