CVE-2011-0611

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12...

8.8 HighIn KEVPublic exploitFix available

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

99.4%Up 15.6 points since Feb 4, 2022

What each source reports

NVD Score used 8.8

Record: CVE-2011-0611
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-843
Updated: 2026-11-02

CVE List 8.8

Record: CVE-2011-0611
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-843
Updated: 2026-11-02

EUVDEUVD-2011-0629 8.8

Record: EUVD-2011-0629
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-xhq8-8cqj-q337 8.8

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12...

Record: GHSA-xhq8-8cqj-q337
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-119, CWE-843
Updated: 2026-11-02

CISA KEV No score

Adobe Flash Player Remote Code Execution Vulnerability

Adobe Flash Player contains a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content.

Record: CVE-2011-0611
Weakness: CWE-843
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`flash-plugin` Red Hat:rhel_extras:5::client	before 0:10.2.159.1-1.el5	0:10.2.159.1-1.el5
`flash-plugin` Red Hat:rhel_extras:5::server	before 0:10.2.159.1-1.el5	0:10.2.159.1-1.el5
`flash-plugin` Red Hat:rhel_extras:6	before 0:10.2.159.1-1.el6	0:10.2.159.1-1.el6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability	2011-04-11
Exploit-DB	Adobe Flash Player 10.2.153.1 - SWF Memory Corruption (Metasploit)	2011-04-16
Exploit-DB	Adobe Reader X 10.0.0 < 10.0.1 - Atom Type Confusion	2011-07-03

History

History
Recorded	Changed	Sources
Nov 3, 2026	exploitation, exploits
Nov 2, 2026	first indexed	CVE List, EUVD, Exploit-DB, GitHub Advisories, CISA KEV, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0611 is a high vulnerability (CVSS 8.8) in Adobe Acrobat, published April 13, 2011. CISA lists it as known to be exploited, since March 3, 2022. EUVD reports exploitation since March 3, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 99.4%, the 99th percentile. Fixed in flash-plugin 0:10.2.159.1-1.el5.

References

Show 29 moreShow less