Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document.