Adobe confirms PDF zero-day, urges users to kill JavaScript