<http://schema.org/articleBody>
"Attention all Adobe Acrobat and Adobe Reader users: a critical vulnerability has been discovered in the latest version of Adobe Acrobat and Adobe Reader that could allow attackers to execute arbitrary code on a user's system by convincing them to open a specially written Adobe PDF file.\nAlthough Acrobat and Reader version 9.1.3 for Windows are the targets, Adobe will be releasing updates for Windows, Mac, and UNIX versions of Acrobat and Reader by October 13.\n\nFrom Adobe's website:\n\"Among other issues, this update will resolve a critical vulnerability in Adobe Reader and Acrobat 9.1.3 and earlier (CVE-2009-3459) on Windows, Macintosh and UNIX. There are reports that this issue is being exploited in the wild in limited targeted attacks; the exploit targets Adobe Reader and Acrobat 9.1.3 on Windows. Adobe Reader and Acrobat 9.1.3 customers with DEP enabled on Windows Vista are protected from this exploit. Disabling JavaScript also mitigates against this specific exploit, although a variant that does not rely on JavaScript could be possible. In the meantime, Adobe is also in contact with Antivirus and Security vendors regarding the issue and recommends users keep their anti-virus definitions up to date.\"\nWhat This Means\nThe vulnerability which is already being exploited in the wild, would allow malicious code to be installed on your computer if you opensup a PDF file that is designed to take advantage of the exploit.\nIn other words, if you are a Windows user and you open up a PDF file, if it is written to take advantage of this exploit, it could allow nasty code to execute on your system or leave your computer open for other exploits.\nHow to Minimize Your Risk\n\nAs with other types of documents, only open e-mail \u00A0PDF-attachments from people you trust. If you are a Windows user, make sure you have up-to-date antivirus and anti-malware software on your system. Microsoft even released the free Microsoft Security Essentials last week.\nWindows Vista users with DEP (Data Execution Prevention) enabled are protected against this exploit. Disabling JavaScript will also prevent against the current exploit, but a non-JavaScript based attack could always be created, so please keep your systems up to date.\nIf you want to disable JavaScript in Adobe Reader or Acrobat, follow these instructions:\n1. Open Acrobat or Reader2. Select Edit&gt;Preferences (this is Apple&gt;Preferences on the Mace)3. Select the JavaScript Category4. Uncheck the \u2018Enable Acrobat JavaScript\u2019 option5. Click OK\nAdobe will be releasing an update for Acrobat and Reader versions 7 - 9 next week, but in the meantime, be aware of any PDF files from strangers, especially if you are a Windows user."^^<http://www.w3.org/2001/XMLSchema#string>
<http://mashable.com/2009/10/09/acrobat-vulnerability/>