A flaw in Adobe Reader and Acrobat could see a PC comprised if users open a malicious PDF, security researchers have warned.
A buffer overflow condition can be triggered by opening a specially-crafted PDF, which gives the attackers control of the computer. Shadowserver said that the flaw could be exploited on systems running Microsoft's Windows XP SP3.
Adobe called the flaw 'critical,' it's most severe rating, and said it will release a patch for Reader 9 and Acrobat 9 by March 11. The company said patches for version 8 of Reader and Acrobat will follow, then finally for version 7 of Reader and Acrobat.
In the meantime, hackers will quickly try to use the flaw. PDF vulnerabilities are especially dangerous since the file format is widely used.
"Right now we believe these files are only being used in a smaller set of targeted attacks," Shadowserver said in an advisory. "However, these types of attacks are frequently the most damaging, and it is only a matter of time before this exploit ends up in every exploit pack on the internet."
"You have the choice of small loss in functionality and a crash versus your systems being compromised and all your data being stolen," the organisation said. "It should be an easy choice."
See also: Flash Player 10 for smartphones demoed