Month Of Abysssec Undisclosed Bugs – Microsoft Cinepak suffers from a CVDecompress heap overflow vulnerability in its codec.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/94275/moaub26-cinepak.pdf
Source: https://packetstormsecurity.com/files/94275/Month-Of-Abysssec-Undisclosed-Bugs-Microsoft-Cinepak.html