Adobe today confirmed that attackers are exploiting an unpatched bug in Flash Player using Microsoft Excel documents.

The company will patch Flash next week and will also update Adobe Reader, which includes code that renders Flash content inserted in PDF files.

"They have exploits out in the wild, so they're moving pretty quickly," said Wolfgang Kandek, chief technology officer at Qualys. "That's commendable."

According to a security advisory issued Monday, attackers are exploiting the vulnerability by embedding malicious Flash files within a Microsoft Excel document sent as an e-mail attachment.

More: http://www.pcworld.com/article/222104/

............................................................................................