Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.