The critical-severity Adobe Acrobat and Reader vulnerabilities could enable arbitrary code execution and are part of a 14-CVE patch update.

Adobe tackles critical code execution vulnerabilities in Acrobat, Reader This month’s security update fixes a variety of critical and important bugs in the software.

Disabling JavaScript will prevent code execution, but not crashes of Adobe Acrobat/Reader. Trend Micro identifies different malware related to this vulnerability in older versions of Adobe Acrobat ...

Adobe's Acrobat and Acrobat Reader packages are currently under attack from a JavaScript-based exploit, similar to one which afflicted the software back in June.

Adobe, although they have admitted to the flaw, has not given a time line for fixing the affected applications with include Acrobat (Reader as well) 9.1, 8.1.4, 7.1.1 and earlier.