A micropatch is now available for a zero-day vulnerability in Adobe Reader that would allow maliciously crafted PDF documents to call home and send over the victim’s NTLM hash to remote attackers in the form of an SMB request. The vulnerability was first disclosed by security researcher Alex Inf..hr on his blog, where a full analysis of the security issue and a proof-of-concept were published before Adobe managed to push out a security fix for the issue. 0patch developed by ACROS Security can be downloaded and applied after creating an account on 0patch.com and registering the agent on the device.
Source: https://www.bleepingcomputer.com/news/security/adobe-reader-zero-day-micropatch-stops-malicious-pdfs-from-calling-home/

