CVE-2011-0609highunder attack

CVE-2011-0609

Published · Updated

Follow this CVE+ Monitor Flash Player

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

98Vexday Risk Score

Patch now. It under exploitation confirmed by CISA, has a working public exploit and 1 threat group(s) use it.

ssvc Actcvss 7.8epss 64%
from disclosure to weapon8 days
Published on NVDMar 15
1st PoC+8d
metasploitMar 15
CISA KEV+4103d
Who exploits it — 1

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

APT / StateAPT12🇨🇳 MITRE ATT&CK
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
5 products
Red Hat Enterprise Linux Desktop Supplementary (v. 5) · Red Hat Enterprise Linux Desktop Supplementary (v. 6) · Red Hat Enterprise Linux Server Supplementary (v. 5) · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Workstation Supplementary (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-06-22

The impacted product is end-of-life and should be disconnected if still in use.

In short

A flaw in Adobe Flash Player and Adobe Reader/Acrobat allows attackers to run malicious code or crash the application when you open a specially crafted file, such as a Flash movie hidden in a document or spreadsheet.

Technical detail

Unspecified vulnerability in Adobe Flash Player (≤10.2.154.13), Adobe AIR (≤2.5.1), and AuthPlay.dll in Adobe Reader/Acrobat (9.x–10.0.1) enables remote code execution or denial of service via crafted SWF content; attack vector is opening malicious documents or embedded Flash files; exploited in the wild via Excel spreadsheets in March 2011.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.