A remote code execution vulnerability exists in the RichEdit components
provided with Microsoft Windows and Microsoft Office. An attacker could exploit
this vulnerability when a user interacts with a malformed embedded OLE object
within a Rich Text Format (RTF) file.
If a user is logged on with administrative user rights, an attacker who
successfully exploited this vulnerability could take complete control of an
affected system. An attacker could then install programs; view, change, or
delete data; or create new accounts with full user rights. Users whose accounts
are configured to have fewer user rights on the system could be less affected
than users who operate with administrative user rights.