Hackers are exploiting a previously unknown flaw in Reader to attack computers running Windows, Adobe said this week.
A patch for the critical vulnerability in Reader and Acrobat is expected by next week, the company said in a blog post.
The vulnerability, which is being exploited in "limited, targeted attacks in the wild against Adobe Reader 9.x on Windows," could allow an attacker to take control of the system, Adobe said.
Adobe is finalising a fix, and expects to release an update for Reader and Acrobat 9.x for Windows no later than the week of 12 December, according to an Adobe security advisory.
"Because Adobe Reader X Protected Mode and Adobe Acrobat X Protected View would prevent an exploit of this kind from executing, we are currently planning to address this issue in Adobe Reader X and Acrobat X for Windows with the next quarterly security update for Adobe Reader and Acrobat currently scheduled for January 10, 2012," the company said. "We are planning to address this issue in Adobe Reader and Acrobat X, and earlier versions for Macintosh, as part of the next quarterly update scheduled for January 10, 2012. An update to address this issue in Adobe Reader 9.x for UNIX is planned for January 10, 2012."
The issue does not affect Adobe Reader for Android and Adobe Flash Player.
Via CNET











