"We've seen 0-days targeting this part of the functionality and it seems to be one of the more flawed features," Eiram said. "We've for a long time been recommending users to disable the plugins used for 3D parsing."
In addition to making these security patches and changes, Adobe also decided to cancel its quarterly update cycle for Adobe Reader and Acrobat and return to its previous patch-as-needed policy. Future Adobe Reader updates will continued be released on the second Tuesday of the month, but it will no longer happen every four months.
"We will publish updates to Adobe Reader and Acrobat as needed throughout the year to best address customer requirements and keep all of our users safe," Lenoe said.
"The quarterly update cycle never worked for Adobe," Eiram said. "Vulnerability fixes should always be provided as quickly as possible; it's not justifiable to unnecessarily postpone a vulnerability fix for up to three months simply due to policy reasons."