Code execution via heap buffer overflow

Heap-based buffer overflow in Microsoft Office Word allows attackers to execute code locally via a crafted document. Microsoft has disclosed only that Word overruns a heap buffer while parsing untrusted content; the vulnerable routine, file format element, and erroneous copy or length calculation are not public. Exploitation requires convincing a user to open attacker-controlled content on a vulnerable Office or Office for Mac build, after which code runs with that user's privileges.