If your kernel was compiled with CONFIG_IP_NF_MATCH_OWNER then you can configure your iptables firewall to allow or reject packets on a per-command basis.
iptables -A OUTPUT -m owner --cmd-owner acroread -j DROP
The owner module only allows matches on the OUTPUT chain!