Hi @ll, soft Xpansion <www.soft-xpansion.com> distributes their (freeware) products "Perfect PDF 7 Master" and "Perfect PDF 7 Reader" (the current files are dated 2011-05-10) with OUTDATED and VULNERABLE Visual C++ 2008 runtime libraries VCRedist_x86.exe/VCRedist_x64.exe version 9.0.30729.17 of 2008-08-08. These libraries have been updated since then at least twice due to vulnerabilities, see <http://www.microsoft.com/technet/security/bulletin/MS09-035.mspx> and <http://www.microsoft.com/technet/security/bulletin/MS11-025.mspx> Timeline: 2011-05-13 vendor informed via mail (no reply) 2011-06-19 vulnerability report published Stefan Kanthak
