This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within processing of the opendoc message. A specially crafted opendoc message can cause an integer wrap of a size value passed to a malloc call, which is followed by a strncpy call. An attacker can leverage this vulnerability to execute code at medium integrity.