Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming table entries.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-0743
http://www.securityfocus.com/bid/60315