Patch/Detour for Acrobat Standard/Professional 8/7 for Flash Vulnerability APSB09-10

Question

Are Acrobat Standard or Professional version 8 or 7 vulnerable to the embedded Flash vulnerability in security bulletin APSB09-10?  Adobe posted a patche for Acrobat 9, but not versions 8 or 7.  The detour that Adobe put on their Product Security Incident Response Team blog does not appear to apply to Acrobat version 8 or 7 (there is no authplay.dll file to delete, rename, or remove access to). If Acrobat 8 or 7 are vulnerable, there is no patch, and the suggested detour does not work, how do we make Acrobat 8 and 7 secure.  (The cost to upgrade to version 9 is not reasonable just to get a security fix.)

Answer 1

How can we be sure of that? I have found nothing authoritative from Adobe. Their security bulletin is very explicit about the versions of Flash Player that are affected and pretty good about the versions of Adobe Reader, but there is no mention about vulnerable versions of Acrobat in the security bulletin or the PSIRT blog. Are we reading a lot between the lines based on no patch for Acrobat versions earlier than 9.x? I would not read the lack of a patch to mean that the older versions are not vulnerable. Is Adobe just expecting everyone to upgrade to the latest version of Acrobat? They can do that with Adobe Reader and Flash Player because they are free. But upgrading to the latest version of Adobe is not something that people will do just to fix a security vulnerability.
I'd really like an official statement from Adobe, perhaps even an update to their security bulletin, clarifying exactly which versions of Adobe are vulnerable and which need no patch/detour.