Microsoft Reader versions 2.1.1.3143 and below and versions 2.6.1.7169 and below suffer from a heap overflow vulnerability caused by the allocation of a certain amount of memory and the copying of arbitrary data during the decompression of the sections. Proof of concept code included.
aba2258d2ada43d5ffdeebb0af357a63127b4b75f7e298f2dc74985d187deb68