Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-5y87-33bx-9fgw
Vulnerability ID VCID-5y87-33bx-9fgw
Aliases CVE-2011-0609
Summary
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3.1 7.8 http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
ssvc Attend http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
cvssv3.1 7.8 http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
ssvc Attend http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
cvssv3.1 7.8 http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
ssvc Attend http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
epss 0.92079 https://api.first.org/data/v1/epss?cve=CVE-2011-0609
cvssv3.1 7.8 http://secunia.com/advisories/43751
ssvc Attend http://secunia.com/advisories/43751
cvssv3.1 7.8 http://secunia.com/advisories/43757
ssvc Attend http://secunia.com/advisories/43757
cvssv3.1 7.8 http://secunia.com/advisories/43772
ssvc Attend http://secunia.com/advisories/43772
cvssv3.1 7.8 http://secunia.com/advisories/43856
ssvc Attend http://secunia.com/advisories/43856
cvssv3.1 7.8 http://securityreason.com/securityalert/8152
ssvc Attend http://securityreason.com/securityalert/8152
cvssv3.1 7.8 https://exchange.xforce.ibmcloud.com/vulnerabilities/66078
ssvc Attend https://exchange.xforce.ibmcloud.com/vulnerabilities/66078
cvssv3.1 7.8 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147
ssvc Attend https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147
cvssv3.1 7.8 http://www.adobe.com/support/security/advisories/apsa11-01.html
ssvc Attend http://www.adobe.com/support/security/advisories/apsa11-01.html
cvssv3.1 7.8 http://www.adobe.com/support/security/bulletins/apsb11-06.html
ssvc Attend http://www.adobe.com/support/security/bulletins/apsb11-06.html
cvssv3.1 7.8 http://www.kb.cert.org/vuls/id/192052
ssvc Attend http://www.kb.cert.org/vuls/id/192052
cvssv3.1 7.8 http://www.redhat.com/support/errata/RHSA-2011-0372.html
ssvc Attend http://www.redhat.com/support/errata/RHSA-2011-0372.html
cvssv3.1 7.8 http://www.securityfocus.com/bid/46860
ssvc Attend http://www.securityfocus.com/bid/46860
cvssv3.1 7.8 http://www.securitytracker.com/id?1025210
ssvc Attend http://www.securitytracker.com/id?1025210
cvssv3.1 7.8 http://www.securitytracker.com/id?1025211
ssvc Attend http://www.securitytracker.com/id?1025211
cvssv3.1 7.8 http://www.securitytracker.com/id?1025238
ssvc Attend http://www.securitytracker.com/id?1025238
cvssv3.1 7.8 http://www.vupen.com/english/advisories/2011/0655
ssvc Attend http://www.vupen.com/english/advisories/2011/0655
cvssv3.1 7.8 http://www.vupen.com/english/advisories/2011/0656
ssvc Attend http://www.vupen.com/english/advisories/2011/0656
cvssv3.1 7.8 http://www.vupen.com/english/advisories/2011/0688
ssvc Attend http://www.vupen.com/english/advisories/2011/0688
cvssv3.1 7.8 http://www.vupen.com/english/advisories/2011/0732
ssvc Attend http://www.vupen.com/english/advisories/2011/0732
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2011-0609
0655 http://www.vupen.com/english/advisories/2011/0655
0656 http://www.vupen.com/english/advisories/2011/0656
0688 http://www.vupen.com/english/advisories/2011/0688
0732 http://www.vupen.com/english/advisories/2011/0732
192052 http://www.kb.cert.org/vuls/id/192052
43751 http://secunia.com/advisories/43751
43757 http://secunia.com/advisories/43757
43772 http://secunia.com/advisories/43772
43856 http://secunia.com/advisories/43856
46860 http://www.securityfocus.com/bid/46860
66078 https://exchange.xforce.ibmcloud.com/vulnerabilities/66078
8152 http://securityreason.com/securityalert/8152
apsb11-06.html http://www.adobe.com/support/security/bulletins/apsb11-06.html
background-on-apsa11-01-patch-schedule.html http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
CVE-2011-0609 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/windows/remote/17027.rb
CVE-2011-0609 Exploit http://www.adobe.com/support/security/advisories/apsa11-01.html
GLSA-201110-11 https://security.gentoo.org/glsa/201110-11
id?1025210 http://www.securitytracker.com/id?1025210
id?1025211 http://www.securitytracker.com/id?1025211
id?1025238 http://www.securitytracker.com/id?1025238
oval%3Aorg.mitre.oval%3Adef%3A14147 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147
RHSA-2011-0372.html http://www.redhat.com/support/errata/RHSA-2011-0372.html
stable-and-beta-channel-updates_15.html http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
Data source Metasploit
Description This module exploits a vulnerability in Adobe Flash Player versions 10.2.152.33 and earlier. This issue is caused by a failure in the ActionScript3 AVM2 verification logic. This results in unsafe JIT(Just-In-Time) code being executed. This is the same vulnerability that was used for the RSA attack in March 2011. Specifically, this issue results in uninitialized memory being referenced and later executed. Taking advantage of this issue relies on heap spraying and controlling the uninitialized memory. Currently this exploit works for IE6, IE7, and Firefox 3.6 and likely several other browsers. DEP does catch the exploit and causes it to fail. Due to the nature of the uninitialized memory its fairly difficult to get around this restriction.
Note 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
Ransomware campaign use Unknown
Source publication date March 15, 2011
Platform Windows
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/windows/browser/adobe_flashplayer_avm.rb
Data source Exploit-DB
Date added March 23, 2011
Description Adobe Flash Player - AVM Bytecode Verification (Metasploit)
Ransomware campaign use Known
Source publication date March 23, 2011
Exploit type remote
Platform windows
Source update date March 23, 2011
Source URL http://www.adobe.com/support/security/advisories/apsa11-01.html
Data source KEV
Date added June 8, 2022
Description Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
Required action The impacted product is end-of-life and should be disconnected if still in use.
Due date June 22, 2022
Note 
https://nvd.nist.gov/vuln/detail/CVE-2011-0609
Ransomware campaign use Unknown
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://secunia.com/advisories/43751
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://secunia.com/advisories/43751
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://secunia.com/advisories/43757
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://secunia.com/advisories/43757
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://secunia.com/advisories/43772
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://secunia.com/advisories/43772
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://secunia.com/advisories/43856
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://secunia.com/advisories/43856
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://securityreason.com/securityalert/8152
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://securityreason.com/securityalert/8152
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://exchange.xforce.ibmcloud.com/vulnerabilities/66078
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at https://exchange.xforce.ibmcloud.com/vulnerabilities/66078
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.adobe.com/support/security/advisories/apsa11-01.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.adobe.com/support/security/advisories/apsa11-01.html
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.adobe.com/support/security/bulletins/apsb11-06.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.adobe.com/support/security/bulletins/apsb11-06.html
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.kb.cert.org/vuls/id/192052
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.kb.cert.org/vuls/id/192052
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.redhat.com/support/errata/RHSA-2011-0372.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.redhat.com/support/errata/RHSA-2011-0372.html
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.securityfocus.com/bid/46860
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.securityfocus.com/bid/46860
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.securitytracker.com/id?1025210
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.securitytracker.com/id?1025210
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.securitytracker.com/id?1025211
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.securitytracker.com/id?1025211
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.securitytracker.com/id?1025238
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.securitytracker.com/id?1025238
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.vupen.com/english/advisories/2011/0655
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.vupen.com/english/advisories/2011/0655
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.vupen.com/english/advisories/2011/0656
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.vupen.com/english/advisories/2011/0656
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.vupen.com/english/advisories/2011/0688
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.vupen.com/english/advisories/2011/0688
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at http://www.vupen.com/english/advisories/2011/0732
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-02-04T21:47:08Z/ Found at http://www.vupen.com/english/advisories/2011/0732
Exploit Prediction Scoring System (EPSS)
Percentile 0.9972
EPSS Score 0.92079
Published At May 30, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-30T21:26:20.373139+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0