Microsoft Reader 2.1.1.3143 Integer Overflow

Microsoft Reader versions 2.1.1.3143 and below suffer from an integer overflow vulnerability during the handling of the number of pieces of the initial ITLS header at offset 0x10. Proof of concept code included.

Source: Microsoft Reader 2.1.1.3143 Integer Overflow