The best option to secure against such exploits is to keep your software up to date.
It is far easier to develop an exploit after there is a security patch out. Basically you take the unpatched software and the patched software and look at the differences. For most malware developers this is the easiest approach as it is a relatively quick way to spot the vulnerabilities and most users don't tend to update their system (and software) regularly.
Even with auto-update features many users still just ignore those messages. Probably because it is annoying if the software you just started wants you to update it and you have to wait for the update to finish and eventually even restart your computer. And after you finished using the software you probably have already forgotten about the update.
The above paragraph was just a rough assumption based on my own past habits and the observation of users like my mother "what does this update thingy box mean?". But this assumption pretty much is what many authors of malware rely on, and you see how good it works.
Another hint: Only open files from trusted sources.