Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
結論預警: CVE-2011-0609 綜合評估為嚴重在野威脅（85.9/100）：CVSS 技術影響為高級，利用機率偏高（EPSS 66.82%，百分位 99%） 核心證據: CISA 已知被利用漏洞目錄（KEV）已於 2022-06-08 確認在野利用，影響 Adobe / Flash Player，攻擊者可能未經認證遠端取得高權限管理存取。 強制指令: CISA 處置期限已過，應以應急修補優先立即處理。
風險隨態勢動態變化；本站持續評估並同步更新本頁展示內容。
: Adobe Flash Player Unspecified Vulnerability · CISA KEV 詳情
: 2022-06-08
: 2022-06-22
: The impacted product is end-of-life and should be disconnected if still in use.
| EDB-ID | 來源 | 類型 | 公開時間 | 連結 |
|---|---|---|---|---|
| 17027 | exploit_db | edb | 2011-03-23 | Exploit-DB ↗ |
EPSS 日更估計相對被利用可能性；百分位表示該 CVE 在已評分漏洞中的相對排名（越高表示相對更嚴重）。
| # | 日期 | 舊 EPSS 分數 | 新 EPSS 分數 | 變化（新 − 舊） |
|---|---|---|---|---|
| 1 | 2026-06-15 | 92.08% | 66.82% | -25.26% |
| 2 | 2026-04-07 | 92.19% | 92.08% | -0.11% |
| 3 | 2026-04-02 | — | 92.19% | — |
完整 EPSS 歷史 （共 29 筆）
該 CVE 的 CVSS 指標。
| 底座分 | 版本 | 嚴重度 | 向量 | 可利用性 | 影響 | 分數來源 |
|---|---|---|---|---|---|---|
| 7.8 | 3.1 | HIGH |
|
1.8 | 5.9 | [email protected] |
| 7.8 | 3.1 | HIGH |
|
1.8 | 5.9 | 134c704f-9b21-4f2e-91b3-4a467353bcc0 |
| 9.3 | 2.0 | HIGH |
|
8.6 | 10.0 | [email protected] |
| vendor | priority | summary | link |
|---|---|---|---|
gentoo
|
normal | CVE-2011-0609: 1 GLSA(s) (201110-11), 1 atom(s) (www-plugins/adobe-flash); latest impact normal. | https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2011-0609 |
redhat
|
critical | — | https://access.redhat.com/security/cve/CVE-2011-0609 |
ubuntu
|
medium | CVE-2011-0609 medium priority: Ubuntu including 3 source packages (acroread, adobe-flashplugin, flashplugin-nonfree), 18 status rows across 6 suites (dapper, hardy, karmic, lucid, maverick, upstream): released 10, not-affected 5, ignored 2, DNE 1. | https://ubuntu.com/security/CVE-2011-0609 |
| 廠商 | 產品 | 版本 | 原始 CPE |
|---|---|---|---|
| adobe | flash_player | <= 10.2.154.13 | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* |
| adobe | flash_player | <= 10.1.106.16 | cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* |
| adobe | acrobat | >= 9.0, <= 9.4.2 | cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* |
| adobe | acrobat | 10.0 | cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:* |
| adobe | acrobat | 10.0.1 | cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:* |
| adobe | acrobat_reader | >= 9.0, <= 9.4.2 | cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.0 | cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:* |
| adobe | acrobat_reader | 10.0.1 | cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:* |
| adobe | air | <= 2.5.1 | cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:* |
| opensuse | opensuse | 11.2 | cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:* |
| opensuse | opensuse | 11.3 | cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:* |
| opensuse | opensuse | 11.4 | cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* |
| suse | linux_enterprise | 10.0 | cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:* |
| suse | linux_enterprise | 11.0 | cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:* |
| chrome | < 10.0.648.134 | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |