Yeah, it seems I was wrong and it was some hole in adobe products:
<a href="http://www.dnaindia.com/scitech/report_adobe-software-may-have-been-exploited-in-cyber-attack_1334387" rel="nofollow">http://www.dnaindia.com/scitech/report_adobe-software-may-ha...</a>