---
title: "CVE-2011-0609\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2011-0609?format=md
keywords: index, follow
---

# CVE-2011-0609

Publication date 15 March 2011

Last updated 25 August 2025

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

## Cvss 3 Severity Score

**7.8 · High**

[Score breakdown](https://ubuntu.com/security/CVE-2011-0609?format=md#impact-score)

Toggle side navigation

## Description

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on
Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android;
Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in
Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on
Windows and Mac OS X, allows remote attackers to execute arbitrary code or
cause a denial of service (application crash) via crafted Flash content, as
demonstrated by a .swf file embedded in an Excel spreadsheet, and as
exploited in the wild in March 2011.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2011-0609?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| acroread | 10.10 maverick | Not affected |
| 10.04 LTS lucid | Not affected |
| 9.10 karmic | Not affected |
| 8.04 LTS hardy | Not affected |
| 6.06 LTS dapper | Ignored |
| adobe-flashplugin | 10.10 maverick | Fixed 10.2.153.1-0maverick1 |
| 10.04 LTS lucid | Fixed 10.2.153.1-0lucid1 |
| 9.10 karmic | Fixed 10.2.153.1-0karmic1 |
| 8.04 LTS hardy | Fixed 10.2.153.1-0hardy1 |
| 6.06 LTS dapper | Not in release |
| flashplugin-nonfree | 10.10 maverick | Fixed 10.2.153.1ubuntu0.10.10.1 |
| 10.04 LTS lucid | Fixed 10.2.153.1ubuntu0.10.04.1 |
| 9.10 karmic | Fixed 10.2.153.1ubuntu0.9.10.1 |
| 8.04 LTS hardy | Fixed 10.2.153.1ubuntu0.8.04.2 |
| 6.06 LTS dapper | Ignored end of life |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [mdeslaur](https://launchpad.net/~mdeslaur)

Upstream description: "memory corruption vulnerability that
could lead to code execution"
upstream says acroread 9.x on UNIX isn't affected

## Severity score breakdown

CVSS version:
CVSS v3.0

**Base score**

7.8 · High

* Base metrics

  | Parameter | Value |
  | --- | --- |
  | Attack vector | Local |
  | Attack complexity | Low |
  | Privileges required | None |
  | User interaction | Required |
  | Scope | Unchanged |
  | Confidentiality impact | High |
  | Integrity impact | High |
  | Availability impact | High |
* Scores

  | Parameter | Value |
  | --- | --- |
  | Base score | 7.8 · High |
  | Exploitability score | - |
  | Impact score | - |

**Vector:** CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0609)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2011-0609)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2011-0609)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2011-0609)

### Other references

* <http://www.adobe.com/support/security/advisories/apsa11-01.html>
* <http://www.adobe.com/support/security/bulletins/apsb11-05.html>
* <http://www.adobe.com/support/security/bulletins/apsb11-06.html>
* <https://www.cve.org/CVERecord?id=CVE-2011-0609>
* <https://www.cisa.gov/known-exploited-vulnerabilities-catalog>