Adobe has just informed about a critical vulnerability in Adobe Reader 9.2 and earlier versions  - which is well… all Adobe Reader versions :-) An update to fix the vulnerability will be released mid January 2010.

You can read the bulletin here - http://www.adobe.com/support/security/advisories/apsa09-07.html

Disable Adobe Reader JavaScript manually

1. Launch Adobe Reader.
2. Select Edit>Preferences
3. Select the JavaScript Category
4. Uncheck the 'Enable Acrobat JavaScript' option
5. Click OK

Disable Adobe Reader JavaScript with a configmgr. package

1. Create bat file with this entry
reg add "HKCU\Software\Adobe\Acrobat Reader\9.0\JSPrefs" /v bEnableJS /d 0 /t REG_DWORD /F
2. Copy the bat file to a network share and create a new package in ConfigMgr.
3. Create a new program and make sure it Runs with user’s rights and only when a user i logged on.