Adobe not planning to close critical vulnerability in Reader until January
Adobe has confirmed the existence of a vulnerability in Adobe Reader and Adobe Acrobat. The vulnerability is already being actively exploited, but the company does not plan to release an update until 12th January 2010. Until then, users should use one of a number of workarounds to protect against attacks
Go to Source
More Informations: