Zero-Day Adobe Reader and Acrobat Patch on the Way this Week
Exploits and the like are nothing new to the realm of Flash Player, Reader, and other Adobe products, but luckily the latest one will soon be fixed. An emergency patch is on the way this week for Adobe Reader and Acrobat to fix some zero-day vulnerabilities. Hackers have already been taking advantage of them in order to send rigged PDFs as email attachments, however that won't be a worry before long. Adobe didn't say when the patch will arrive, just that it'll be here later this week. The exploit effectively goes around the anti-exploit "sandbox" in Reader 10 and 11, which was only discovered last week. There are some security experts that believe the attacks so far are on the same level as the Duqu attacks in 2011, though that hasn't been confirmed yet.
Until the emergency patch arrives, Adobe advises everyone to upgrade to Reader 11 and turn on "Protected View," which adds even more security measures to the sandbox.
Source: Computer World