VULNERABILITIES
Adobe delivers an out-of-date version of Reader to users who download the popular application from its Web site, [vulnerability tracking vendor Secunia] warned today. … The version now hosted on Adobe's Web site…is Reader 9.1, an edition that was released March 10 to plug several holes, including one that had been actively exploited by hackers since at least Jan. 9, 2009. Adobe has issued two security updates since then. The first, released May 12, patched another "zero-day" bug in Reader, while the second, issued June 9, fixed at least 13 critical flaws reported by outside researchers and secretly patched an unspecified number of bugs found by Adobe's own security team.
IMHO, Adobe Acrobat Reader sucks. I've been using Foxit reader ever since it was released. No bloatware like Adobe. This is the 4th or 5th flaw already exposed in the last two weeks.
[Date: 20 July 2009;
More...:
Adobe doles out bug-filled PDF Reader to users]