Some integer overflow, use-after-free and out-of-bounds writes bugs in the Abobe PDF viewer: http://gynvael.coldwind.pl/?id=483 To find them maybe they have used the ideas shown here: http://taviso.decsystem.org/making_software_dumber.pdf Bye, bearophile