Adobe has released an advisory to warn about a remote code execution vulnerability in Flash Player. The vulnerability also affects Adobe Reader and Acrobat. Attacks work through a malicious SWF file which is embedded inside an Excel file. Adobe will be publishing a patch during the week of March 21. Reader X will only be patched on June 14th, as its protected mode offers sufficient mitigation according to Adobe. The reason why the attackers are using Excel as a delivery vehicle is simple. This way the attack can easily be delivered through email.”]
Source: https://securelist.com/new-adobe-zero-day-under-attack/29765/