Adobe today confirmed that an unpatched, or zero-day, vulnerability in Adobe Reader is being exploited by criminals.
Those attacks may have been aimed at defense contractors.
Adobe promised to patch the bug in the Windows edition of Reader and Acrobat 9 no later than the end of next week. Tuesday, Dec. 12 is also Microsoft’s regularly-scheduled Patch Tuesday for the month.
The upcoming patch will be Adobe’s sixth for Reader and Acrobat this year.
“A critical vulnerability has been [found] in Adobe Reader X (10.1.1) and earlier versions for Windows and Macintosh, Adobe Reader 9.4.6 and earlier 9.x versions for Unix, and Adobe Acrobat X (10.1.1) and earlier versions for Windows and Macintosh,” Adobe said in an early-warning email. “This vulnerability could cause a crash and potentially allow an attacker to take control of the affected system.”
via Computerworld, continued here.