Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2012-0705

Опубликовано: 05 июн. 2012
Источник: oracle-oval
Платформа: Oracle Linux 6

Описание

ELSA-2012-0705: openoffice.org security update (IMPORTANT)

[1:3.2.1-19.6.0.1.el6_2.7]

  • Replaced RedHat colors with Oracle colors, OOO_VENDOR with Oracle Corp., and the filename redhat.soc with oracle.soc in specfile

[1:3.2.1-19.6.7]

  • Resolves: CVE-2012-2334 Integer overflow leading to buffer overflow by processing invalid Escher graphics records length in the Powerpoint documents

[1:3.2.1-19.6.6]

  • Resolves: CVE-2012-1149 Integer overflows, leading to heap-buffer overflows in JPEG, PNG and BMP reader implementations

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

autocorr-af

3.2.1-19.6.0.1.el6_2.7

autocorr-bg

3.2.1-19.6.0.1.el6_2.7

autocorr-cs

3.2.1-19.6.0.1.el6_2.7

autocorr-da

3.2.1-19.6.0.1.el6_2.7

autocorr-de

3.2.1-19.6.0.1.el6_2.7

autocorr-en

3.2.1-19.6.0.1.el6_2.7

autocorr-es

3.2.1-19.6.0.1.el6_2.7

autocorr-eu

3.2.1-19.6.0.1.el6_2.7

autocorr-fa

3.2.1-19.6.0.1.el6_2.7

autocorr-fi

3.2.1-19.6.0.1.el6_2.7

autocorr-fr

3.2.1-19.6.0.1.el6_2.7

autocorr-ga

3.2.1-19.6.0.1.el6_2.7

autocorr-hu

3.2.1-19.6.0.1.el6_2.7

autocorr-it

3.2.1-19.6.0.1.el6_2.7

autocorr-ja

3.2.1-19.6.0.1.el6_2.7

autocorr-ko

3.2.1-19.6.0.1.el6_2.7

autocorr-lb

3.2.1-19.6.0.1.el6_2.7

autocorr-lt

3.2.1-19.6.0.1.el6_2.7

autocorr-mn

3.2.1-19.6.0.1.el6_2.7

autocorr-nl

3.2.1-19.6.0.1.el6_2.7

autocorr-pl

3.2.1-19.6.0.1.el6_2.7

autocorr-pt

3.2.1-19.6.0.1.el6_2.7

autocorr-ru

3.2.1-19.6.0.1.el6_2.7

autocorr-sk

3.2.1-19.6.0.1.el6_2.7

autocorr-sl

3.2.1-19.6.0.1.el6_2.7

autocorr-sv

3.2.1-19.6.0.1.el6_2.7

autocorr-tr

3.2.1-19.6.0.1.el6_2.7

autocorr-vi

3.2.1-19.6.0.1.el6_2.7

autocorr-zh

3.2.1-19.6.0.1.el6_2.7

broffice.org-base

3.2.1-19.6.0.1.el6_2.7

broffice.org-brand

3.2.1-19.6.0.1.el6_2.7

broffice.org-calc

3.2.1-19.6.0.1.el6_2.7

broffice.org-draw

3.2.1-19.6.0.1.el6_2.7

broffice.org-impress

3.2.1-19.6.0.1.el6_2.7

broffice.org-math

3.2.1-19.6.0.1.el6_2.7

broffice.org-writer

3.2.1-19.6.0.1.el6_2.7

openoffice.org-base

3.2.1-19.6.0.1.el6_2.7

openoffice.org-base-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-brand

3.2.1-19.6.0.1.el6_2.7

openoffice.org-bsh

3.2.1-19.6.0.1.el6_2.7

openoffice.org-calc

3.2.1-19.6.0.1.el6_2.7

openoffice.org-calc-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-devel

3.2.1-19.6.0.1.el6_2.7

openoffice.org-draw

3.2.1-19.6.0.1.el6_2.7

openoffice.org-draw-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-emailmerge

3.2.1-19.6.0.1.el6_2.7

openoffice.org-graphicfilter

3.2.1-19.6.0.1.el6_2.7

openoffice.org-headless

3.2.1-19.6.0.1.el6_2.7

openoffice.org-impress

3.2.1-19.6.0.1.el6_2.7

openoffice.org-impress-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-javafilter

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-af_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ar

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-as_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-bg_BG

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-bn

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ca_ES

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-cs_CZ

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-cy_GB

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-da_DK

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-de

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-dz

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-el_GR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-en

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-es

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-et_EE

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-eu_ES

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-fi_FI

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-fr

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ga_IE

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-gl_ES

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-gu_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-he_IL

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-hi_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-hr_HR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-hu_HU

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-it

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ja_JP

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-kn_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ko_KR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-lt_LT

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-mai_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ml_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-mr_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ms_MY

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nb_NO

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nl

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nn_NO

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nr_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nso_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-or_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-pa

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-pl_PL

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-pt_BR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-pt_PT

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ro

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ru

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-sk_SK

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-sl_SI

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-sr

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ss_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-st_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-sv

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ta_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-te_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-th_TH

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-tn_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-tr_TR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ts_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-uk

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ur

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ve_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-xh_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-zh_CN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-zh_TW

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-zu_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-math

3.2.1-19.6.0.1.el6_2.7

openoffice.org-math-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-ogltrans

3.2.1-19.6.0.1.el6_2.7

openoffice.org-opensymbol-fonts

3.2.1-19.6.0.1.el6_2.7

openoffice.org-pdfimport

3.2.1-19.6.0.1.el6_2.7

openoffice.org-presentation-minimizer

3.2.1-19.6.0.1.el6_2.7

openoffice.org-presenter-screen

3.2.1-19.6.0.1.el6_2.7

openoffice.org-pyuno

3.2.1-19.6.0.1.el6_2.7

openoffice.org-report-builder

3.2.1-19.6.0.1.el6_2.7

openoffice.org-rhino

3.2.1-19.6.0.1.el6_2.7

openoffice.org-sdk

3.2.1-19.6.0.1.el6_2.7

openoffice.org-sdk-doc

3.2.1-19.6.0.1.el6_2.7

openoffice.org-testtools

3.2.1-19.6.0.1.el6_2.7

openoffice.org-ure

3.2.1-19.6.0.1.el6_2.7

openoffice.org-wiki-publisher

3.2.1-19.6.0.1.el6_2.7

openoffice.org-writer

3.2.1-19.6.0.1.el6_2.7

openoffice.org-writer-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-xsltfilter

3.2.1-19.6.0.1.el6_2.7

Oracle Linux i686

autocorr-af

3.2.1-19.6.0.1.el6_2.7

autocorr-bg

3.2.1-19.6.0.1.el6_2.7

autocorr-cs

3.2.1-19.6.0.1.el6_2.7

autocorr-da

3.2.1-19.6.0.1.el6_2.7

autocorr-de

3.2.1-19.6.0.1.el6_2.7

autocorr-en

3.2.1-19.6.0.1.el6_2.7

autocorr-es

3.2.1-19.6.0.1.el6_2.7

autocorr-eu

3.2.1-19.6.0.1.el6_2.7

autocorr-fa

3.2.1-19.6.0.1.el6_2.7

autocorr-fi

3.2.1-19.6.0.1.el6_2.7

autocorr-fr

3.2.1-19.6.0.1.el6_2.7

autocorr-ga

3.2.1-19.6.0.1.el6_2.7

autocorr-hu

3.2.1-19.6.0.1.el6_2.7

autocorr-it

3.2.1-19.6.0.1.el6_2.7

autocorr-ja

3.2.1-19.6.0.1.el6_2.7

autocorr-ko

3.2.1-19.6.0.1.el6_2.7

autocorr-lb

3.2.1-19.6.0.1.el6_2.7

autocorr-lt

3.2.1-19.6.0.1.el6_2.7

autocorr-mn

3.2.1-19.6.0.1.el6_2.7

autocorr-nl

3.2.1-19.6.0.1.el6_2.7

autocorr-pl

3.2.1-19.6.0.1.el6_2.7

autocorr-pt

3.2.1-19.6.0.1.el6_2.7

autocorr-ru

3.2.1-19.6.0.1.el6_2.7

autocorr-sk

3.2.1-19.6.0.1.el6_2.7

autocorr-sl

3.2.1-19.6.0.1.el6_2.7

autocorr-sv

3.2.1-19.6.0.1.el6_2.7

autocorr-tr

3.2.1-19.6.0.1.el6_2.7

autocorr-vi

3.2.1-19.6.0.1.el6_2.7

autocorr-zh

3.2.1-19.6.0.1.el6_2.7

broffice.org-base

3.2.1-19.6.0.1.el6_2.7

broffice.org-brand

3.2.1-19.6.0.1.el6_2.7

broffice.org-calc

3.2.1-19.6.0.1.el6_2.7

broffice.org-draw

3.2.1-19.6.0.1.el6_2.7

broffice.org-impress

3.2.1-19.6.0.1.el6_2.7

broffice.org-math

3.2.1-19.6.0.1.el6_2.7

broffice.org-writer

3.2.1-19.6.0.1.el6_2.7

openoffice.org-base

3.2.1-19.6.0.1.el6_2.7

openoffice.org-base-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-brand

3.2.1-19.6.0.1.el6_2.7

openoffice.org-bsh

3.2.1-19.6.0.1.el6_2.7

openoffice.org-calc

3.2.1-19.6.0.1.el6_2.7

openoffice.org-calc-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-devel

3.2.1-19.6.0.1.el6_2.7

openoffice.org-draw

3.2.1-19.6.0.1.el6_2.7

openoffice.org-draw-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-emailmerge

3.2.1-19.6.0.1.el6_2.7

openoffice.org-graphicfilter

3.2.1-19.6.0.1.el6_2.7

openoffice.org-headless

3.2.1-19.6.0.1.el6_2.7

openoffice.org-impress

3.2.1-19.6.0.1.el6_2.7

openoffice.org-impress-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-javafilter

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-af_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ar

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-as_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-bg_BG

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-bn

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ca_ES

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-cs_CZ

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-cy_GB

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-da_DK

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-de

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-dz

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-el_GR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-en

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-es

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-et_EE

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-eu_ES

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-fi_FI

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-fr

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ga_IE

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-gl_ES

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-gu_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-he_IL

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-hi_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-hr_HR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-hu_HU

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-it

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ja_JP

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-kn_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ko_KR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-lt_LT

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-mai_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ml_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-mr_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ms_MY

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nb_NO

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nl

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nn_NO

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nr_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-nso_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-or_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-pa

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-pl_PL

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-pt_BR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-pt_PT

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ro

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ru

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-sk_SK

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-sl_SI

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-sr

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ss_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-st_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-sv

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ta_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-te_IN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-th_TH

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-tn_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-tr_TR

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ts_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-uk

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ur

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-ve_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-xh_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-zh_CN

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-zh_TW

3.2.1-19.6.0.1.el6_2.7

openoffice.org-langpack-zu_ZA

3.2.1-19.6.0.1.el6_2.7

openoffice.org-math

3.2.1-19.6.0.1.el6_2.7

openoffice.org-math-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-ogltrans

3.2.1-19.6.0.1.el6_2.7

openoffice.org-opensymbol-fonts

3.2.1-19.6.0.1.el6_2.7

openoffice.org-pdfimport

3.2.1-19.6.0.1.el6_2.7

openoffice.org-presentation-minimizer

3.2.1-19.6.0.1.el6_2.7

openoffice.org-presenter-screen

3.2.1-19.6.0.1.el6_2.7

openoffice.org-pyuno

3.2.1-19.6.0.1.el6_2.7

openoffice.org-report-builder

3.2.1-19.6.0.1.el6_2.7

openoffice.org-rhino

3.2.1-19.6.0.1.el6_2.7

openoffice.org-sdk

3.2.1-19.6.0.1.el6_2.7

openoffice.org-sdk-doc

3.2.1-19.6.0.1.el6_2.7

openoffice.org-testtools

3.2.1-19.6.0.1.el6_2.7

openoffice.org-ure

3.2.1-19.6.0.1.el6_2.7

openoffice.org-wiki-publisher

3.2.1-19.6.0.1.el6_2.7

openoffice.org-writer

3.2.1-19.6.0.1.el6_2.7

openoffice.org-writer-core

3.2.1-19.6.0.1.el6_2.7

openoffice.org-xsltfilter

3.2.1-19.6.0.1.el6_2.7

Связанные CVE

Связанные уязвимости

ubuntu
около 13 лет назад

Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.

redhat
больше 13 лет назад

Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.

nvd
около 13 лет назад

Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the length of an Escher graphics record in a PowerPoint (.ppt) document, which triggers a buffer overflow.

debian
около 13 лет назад

Integer overflow in filter/source/msfilter/msdffimp.cxx in OpenOffice. ...

ubuntu
около 13 лет назад

Integer overflow in the vclmi.dll module in OpenOffice.org (OOo) 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JPEG image in a .DOC file, which triggers a heap-based buffer overflow.