Secunia Research has discovered a vulnerability in Microsoft Office, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to an integer overflow when processing the number of colours used in a bitmap image. This can be exploited to cause a heap-based buffer overflow via a specially crafted bitmap image. Successful exploitation may allow execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/81996/secunia-mobmp.txt
Source: https://packetstormsecurity.com/files/81996/Microsoft-Office-BMP-Image-Colour-Handling-Integer-Overflow.html