If it feels like deja vu, it’s because we’ve heard it so many times before, but here we go again: There’s a new zero day vulnerability in Adobe’s PDF Reader and Acrobat, and it’s being actively exploited. Specifically, Adobe warned today that Reader versions 9.3.4 and earlier for Windows, Mac and UNIX, along with Acrobat 9.3.4 and earlier for Windows and Mac, have a critical vulnerability that could cause a crash and potentially allow an attacker to take control of the affected system. There’s no fix yet, and Adobe hasn’t even offered any workarounds. It might be time to have your organization’s users uninstall Adobe Reader and try one of the many alternatives.
http://www.zdnet.com/blog/security/new-adobe-pdf-zero-day-under-attack/7283?tag=nl.e589