Microsoft Reader is a PC/tablet software for reading the ebooks in LIT format and the Audible audio books. The following are a couple of integer overflows, an heap and an array indexing overflow and the writing of a NULL byte in an arbitrary memory location: http://aluigi.org/adv/msreader_1-adv.txt http://aluigi.org/adv/msreader_2-adv.txt http://aluigi.org/adv/msreader_3-adv.txt http://aluigi.org/adv/msreader_4-adv.txt http://aluigi.org/adv/msreader_5-adv.txt There are also some bugs in Microsoft Host Integration Server 2010 but they are only Denial of Service vulnerabilities like the crashing and the freezing of the services with CPU at 100%: http://aluigi.org/adv/snabase_1-adv.txt --- Luigi Auriemma http://aluigi.org
