iDefense Security Advisory 08.10.10 – Remote exploitation of a heap buffer overflow vulnerability in Microsoft Corp.’s Word could allow attackers to execute arbitrary code under the privileges of the targeted user. This vulnerability specifically exists in the handling of some drawing object control words in an RTF document. Under certain circumstances, Word will copy a property value into a heap buffer without checking the length, which causes a heap buffer overflow. iDefense has confirmed the existence of this vulnerability in Microsoft Word 2003, Microsoft Word 2007, and Microsoft Outlook 2007. A full list of vulnerable Microsoft products can be found in Microsoft Security Bulletin MS10-056.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/92666/08.10.10-1.txt
Source: https://packetstormsecurity.com/files/92666/iDEFENSE-Security-Advisory-2010-08-10.1.html