Code execution via stack overflow in graphics parsing

Stack-based buffer overflow in the Microsoft Office Graphics Component in Microsoft Office allows attackers to execute code via a crafted document. Microsoft describes the flaw only at the component level; public records do not identify the specific parser or routine, but the bug is a stack overwrite during Office graphics-content processing. Exploitation requires local processing of attacker-controlled content, so exposure depends on opening or previewing a malicious Office file and code runs with the current user's rights.