Code execution via graphics stack overflow

Stack-based buffer overflow in the Graphics Component in Microsoft Office allows attackers to execute code via a crafted Office file. Microsoft describes the bug only as a stack-based overflow in the Office Graphics Component; no public advisory or release note inspected here identifies the vulnerable parser, routine, or file field that writes past a stack buffer. The published CVSS vector shows no prior privileges but required user interaction and local processing, so exposure depends on Office rendering attacker-supplied content on the endpoint.