iDEFENSE Security Advisory 07.12.05 – Remote exploitation of a buffer overflow vulnerability in Microsoft Corp.’s Word could allow execution of arbitrary code. A specially crafted .doc file, containing long font information, can cause Word to overwrite stack space. No checks are made on the length of data being copied, allowing the return address on the stack to be overwritten.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/38626/07.12.05.txt
Source: https://packetstormsecurity.com/files/38626/iDEFENSE-Security-Advisory-2005-07-12.t.html