The issue is related to insufficient data validation in the Windows Reader component, allowing remote attackers to execute arbitrary code via a crafted Reader file. This could enable an attacker to take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights, especially if the user is logged on with administrative user rights. Users with fewer user rights on the system may be less impacted.