Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Drawing Exception Handling Vulnerability."
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11739
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087
http://www.vupen.com/english/advisories/2010/2923
http://www.us-cert.gov/cas/techalerts/TA10-313A.html
http://www.securitytracker.com/id?1024705
http://www.securityfocus.com/bid/44659