Multiple vulnerabilities have been reported in Adobe Reader and Adobe Acrobat, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.

1) An error in the U3D data handling can be exploited to corrupt memory.

NOTE: This vulnerability is currently being actively exploited in targeted attacks against Adobe Reader 9.x on Windows.

2) An unspecified error in the PRC component can be exploited to corrupt memory.

NOTE: This vulnerability is currently being actively exploited in targeted attacks against Adobe Reader 9.x on Windows.

3) The application bundles a vulnerable version of Adobe Flash Player.

For more information:
SA46818

The vulnerabilities are reported in the following products:
* Adobe Reader X versions 10.1.1 and prior for Windows and Macintosh.
* Adobe Reader versions 9.4.6 and prior for Windows, Macintosh, and UNIX.
* Adobe Acrobat X versions 10.1.1 and prior for Windows and Macintosh.
* Adobe Acrobat versions 9.4.6 and prior for Windows and Macintosh.

Solution
Update to a fixed version:
Further details available in Customer Area

Provided and/or discovered by
1) Reported as a 0-day.
2) Reported as a 0-day.

Changelog
Further details available in Customer Area

Original Advisory
Adobe:
http://www.adobe.com/support/security/bulletins/apsb11-30.html

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area