Skip to main content

Microsoft Reader LIT File Processing Multiple Vulnerabilities

Last Update Date: 15 Apr 2011 14:45 Release Date: 15 Apr 2011 5700 Views

RISK: High Risk

TYPE: Clients - Productivity Products

TYPE: Productivity Products

Multiple vulnerabilities have been identified in Microsoft Reader, which could be exploited by attackers to execute arbitrary code. These issues are caused by buffer and integer overflows, memory corruptions and array indexing errors when processing malformed LIT files, which could be exploited by attackers to compromise a vulnerable system by convincing a user to open a specially crafted file.


Impact

  • Remote Code Execution

System / Technologies affected

  • Microsoft Reader PC version 2.1.1.3143 and prior

Solutions

  • There is no patch available for this vulnerability currently.

Vulnerability Identifier

  • No CVE information is available

Source


Related Link