Local code execution via integer overflow

Integer overflow in Microsoft Office allows attackers to execute code locally when crafted content is opened in affected Office releases. Microsoft's CVE record identifies an integer overflow or wraparound and also maps a heap-based buffer overflow, but it does not disclose the affected parser, file-format field, or the arithmetic operation that leads to memory corruption. The published scoring requires user interaction and no prior privileges, so exposure depends on whether untrusted Office documents can be opened on affected Windows or Mac installations.