Just saw this at ARS Technica:
Thanks, Adobe. Protection for critical zero-day exploit not on by default
The gist of the article is that Adobe Readers sandbox isn’t on by default.
To turn it on go to: Preferences > Security (Enhanced) > Protected View > click the All Files button > click OK.