CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability
Published Apr 13, 2011 · updated Jun 16, 2026 · adobe flash player
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.
Timeline
Detection, updates, and resolution for this record.
Apr 13, 2011 · Catalog
Detected
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac
Mar 3, 2022 · CISA KEV
Known exploited
The impacted product is end-of-life and should be disconnected if still in use.
Mar 24, 2022 · CISA KEV
Remediation due
The impacted product is end-of-life and should be disconnected if still in use.
Jun 16, 2026 · Catalog
Updated
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac
Required action
The impacted product is end-of-life and should be disconnected if still in use.
CISA due date Mar 24, 2022
Affected
- cpe adobe/acrobatversion unspecified
- cpe adobe/acrobat readerversion unspecified
- cpe adobe/adobe airversion unspecified
- cpe adobe/flash playerversion unspecified
- cpe google/chromeversion unspecified
- cpe opensuse/opensuse11.2
- vendor Adobe Flash Playerversion unspecified
Sources
- CISA KEVCVE-2011-0611
Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.
cisa.gov - CVE.orgCVE-2011-0611
Official CVE identifier
cve.org - FIRST EPSSCVE-2011-0611
30-day exploitation probability 99.4%
first.org - Exploit Database17175
Public archive entry. The exploit body is not stored here.
exploit-db.com - Exploit Database17473
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_windows/browser/adobe_flashplayer_flash10o
Public module reference (normal). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2011-0611
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x befor
nvd.nist.gov