For those that haven't seen this yet: http://www.theregister.co.uk/2009/02/20/adobe_reader_exploit/ http://www.shadowserver.org/wiki/pmwiki.php?n=Calendar.20090219 http://www.adobe.com/support/security/advisories/apsa09-01.html I can confirm that there is active (targeted) exploitation taking place. V/R, Matt Swaar US-CERT Analyst