Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2011-0611 Details

Description

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CNA: CISA-ADPCVSS-B:8.8 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0611	CISA-ADP	US Government Resource
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx	CVE	Not Applicable
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html	CVE	Exploit
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html	CVE	ExploitIssue Tracking
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html	CVE	Release Notes
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html	CVE	Mailing ListPatch
http://secunia.com/advisories/44119	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/44141	CVE	Broken LinkVendor Advisory
http://secunia.com/advisories/44149	CVE	Broken LinkVendor Advisory
http://secunia.com/blog/210/	CVE	Broken LinkVendor Advisory
http://securityreason.com/securityalert/8204	CVE	Third Party Advisory
http://securityreason.com/securityalert/8292	CVE	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681	CVE	Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175	CVE	Broken Link
http://www.adobe.com/support/security/advisories/apsa11-02.html	CVE	Broken LinkVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-07.html	CVE	Broken LinkVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-08.html	CVE	Broken LinkVendor Advisory
http://www.exploit-db.com/exploits/17175	CVE	ExploitThird Party AdvisoryVDB Entry
http://www.kb.cert.org/vuls/id/230057	CVE	Broken LinkThird Party AdvisoryUS Government Resource
http://www.redhat.com/support/errata/RHSA-2011-0451.html	CVE	Broken LinkVendor Advisory
http://www.securityfocus.com/bid/47314	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1025324	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1025325	CVE	Broken LinkThird Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2011/0922	CVE	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2011/0923	CVE	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2011/0924	CVE	Broken LinkVendor Advisory
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx	[email protected]	Not Applicable
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html	[email protected]	Exploit
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html	[email protected]	ExploitIssue Tracking
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html	[email protected]	Release Notes
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html	[email protected]	Mailing ListPatch
http://secunia.com/advisories/44119	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/44141	[email protected]	Broken LinkVendor Advisory
http://secunia.com/advisories/44149	[email protected]	Broken LinkVendor Advisory
http://secunia.com/blog/210/	[email protected]	Broken LinkVendor Advisory
http://securityreason.com/securityalert/8204	[email protected]	Third Party Advisory
http://securityreason.com/securityalert/8292	[email protected]	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681	[email protected]	Third Party AdvisoryVDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175	[email protected]	Broken Link
http://www.adobe.com/support/security/advisories/apsa11-02.html	[email protected]	Broken LinkVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-07.html	[email protected]	Broken LinkVendor Advisory
http://www.adobe.com/support/security/bulletins/apsb11-08.html	[email protected]	Broken LinkVendor Advisory
http://www.exploit-db.com/exploits/17175	[email protected]	ExploitThird Party AdvisoryVDB Entry
http://www.kb.cert.org/vuls/id/230057	[email protected]	Broken LinkThird Party AdvisoryUS Government Resource
http://www.redhat.com/support/errata/RHSA-2011-0451.html	[email protected]	Broken LinkVendor Advisory
http://www.securityfocus.com/bid/47314	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1025324	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1025325	[email protected]	Broken LinkThird Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2011/0922	[email protected]	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2011/0923	[email protected]	Broken LinkVendor Advisory
http://www.vupen.com/english/advisories/2011/0924	[email protected]	Broken LinkVendor Advisory

see all 51 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Adobe Flash Player Remote Code Execution Vulnerability	Mar 3, 2022	Mar 24, 2022	The impacted product is end-of-life and should be disconnected if still in use.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-843	Access of Resource Using Incompatible Type ('Type Confusion')	[email protected]
CWE-843	Access of Resource Using Incompatible Type ('Type Confusion')	CISA-ADP

Affected Products

Product	Versions
adobe flash player	< 10.2.154.27 <= 10.2.156.12
CPE cpe:2.3:a:adobe:flash_player:::::::: Remediation No remediation found in references.
apple mac os x	All versions
CPE cpe:2.3:o:apple:mac_os_x:-:::::::* Remediation No remediation found in references.
linux linux kernel	All versions
CPE cpe:2.3:o:linux:linux_kernel:-:::::::* Remediation No remediation found in references.
microsoft windows	All versions
CPE cpe:2.3:o:microsoft:windows:-:::::::* Remediation No remediation found in references.
oracle solaris	All versions
CPE cpe:2.3:o:oracle:solaris:-:::::::* Remediation No remediation found in references.
google android	All versions
CPE cpe:2.3:o:google:android:-:::::::* Remediation No remediation found in references.
adobe acrobat reader	>= 9.0, < 9.4.4 >= 10.0, <= 10.0.1 >= 10.0, < 10.0.3
CPE cpe:2.3:a:adobe:acrobat_reader:::::::: Remediation No remediation found in references.
adobe adobe air	< 2.6.19140
CPE cpe:2.3:a:adobe:adobe_air:::::::: Remediation No remediation found in references.
adobe acrobat	>= 9.0, < 9.4 >= 10.0, < 10.0.3
CPE cpe:2.3:a:adobe:acrobat:::::::: Remediation No remediation found in references.
google chrome	< 10.0.648.205
CPE cpe:2.3:a:google:chrome:::::::: Remediation No remediation found in references.
google chrome os	All versions
CPE cpe:2.3:o:google:chrome_os:-:::::::* Remediation No remediation found in references.
opensuse opensuse	11.2 11.3 11.4
CPE cpe:2.3:o:opensuse:opensuse:11.2:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::* cpe:2.3:o:opensuse:opensuse:11.4:::::::* Remediation No remediation found in references.
suse linux enterprise desktop	10 sp4 11 sp1
CPE cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:::-:::* cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:::::: Remediation No remediation found in references.

Change History

18 change records found show changes

Date	Action	Recorded By
Jun 16, 2026	CVE Modified	CISA-ADP
Jun 16, 2026	CVE Modified	[email protected]
Apr 21, 2026	Modified Analysis	[email protected]
Oct 22, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Oct 21, 2025	CVE Modified	CISA-ADP
Dec 20, 2024	Modified Analysis	[email protected]
Nov 21, 2024	CVE Modified	CVE
Aug 13, 2024	Modified Analysis	[email protected]
Jul 3, 2024	CVE Modified	CISA-ADP
May 14, 2024	CVE Modified	[email protected]
Feb 2, 2024	Modified Analysis	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Oct 30, 2018	CPE Deprecation Remap	[email protected]
Sep 19, 2017	CVE Modified	[email protected]
Aug 17, 2017	CVE Modified	[email protected]
Apr 13, 2011	Initial Analysis	[email protected]

CVE-2011-0611 Details

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO