Adobe confirms that an unpatched, or zero-day, vulnerability in Adobe Reader is being exploited by criminals. The attacks exploiting the flaw may have targeted U.S. defense contractors. Adobe promised to patch the bug in the Windows edition of Reader and Acrobat 9 no later than the end of next week. The bug is a “U3D memory corruption vulnerability,” a “universal 3D” standard for 3-D graphics data. The vulnerability could cause a crash and potentially allow an attacker to take control of the affected system.”]

