Russian security firm Group-IB has found a zero-day vulnerability in Adobes PDF reader software that is fetching between $30K and $50K on the black market. The vulnerability is able to get around the built-in sandboxing protection that Adobe added to its Reader application with the release of version X (version 10) in July, in an attempt to keep potentially malicious PDF files at arm’s distance from the operating system by running them in a confined environment. The exploit, is reportedly being used to install banking malware, is also packaged up in the new version of the Blackhole Exploit Kit.”]
Source: https://nakedsecurity.sophos.com/2012/11/08/adobe-reader-zero-day-exploit-thwarts-sandboxing/