Adobe will reportedly patch a critical vulnerability (CVE-2009-4324) in Reader and Acrobat on January 12, the company's next scheduled quarterly security update, as opposed to an off-cycle release. The zero-day bug is currently being exploited on Reader and Acrobat versions 9.2 and earlier. If used, an attacker could crash the system and ultimately take control of it.
Webroot analyzed the malware and discovered that it installs three files which resemble Windows system files, and are digitally signed with a forged Microsoft certificate. However, unlike legitimate Microsoft-signed certificates, the malware's lack an email address and timestamp.