Recent versions of Adobe Reader (previously known as Acrobat Reader) are vulnerable to XML External Entity (XXE) Attacks. By including a JavaScript in a PDF file, and have this JavaScript parse an embedded XML document with a reference to an external entity, it is possible to read certain types of textual files on the local computer, and have them sent to a remote attacker.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38181/adobeXML.txt
Source: https://packetstormsecurity.com/files/38181/adobeXML.txt.html