Acrobat & Adobe Reader Vulnerability

“A cross-site scripting (XSS) vulnerability in versions 7.0.8 and earlier of Adobe Reader and Acrobat could allow remote attackers to inject arbitrary JavaScript into a browser session. Exploitability depends on the browser and browser version being used.”

Solution:

You can mitigate this problem by upgrading to Adobe Reader 8.

Alternatively, you can implement a workaround in your browser so that it does not use the Acrobat Reader plugin. The following instructions apply to the Firefox browser:
• In the Tools menu, select Options.
• Select Downloads in the Options dialog.
• Click on the View & Edit Actions button.
• In the Download Actions dialog, choose the action for the PDF extension or the Adobe Acrobat Document file type and then click on Change Action.