Two vulnerabilities have been reported in multiple Microsoft products, which can be exploited by malicious people to compromise a user's system.

1) An error when parsing the PAPX section can be exploited to corrupt memory via a specially crafted Word file.

NOTE: This vulnerability affects Microsoft Word 2007 only.

2) A use-after-free error exists when handling listid and can be exploited via a specially crafted RTF file.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Solution
Apply updates.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) An anonymous person via ZDI.
2) The vendor credits an anonymous person via Beyond Security SSD.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS12-064 (KB2742319, KB2687483, KB2687315, KB2553488, KB2687485, KB2687314, KB2598237, KB2687401)
http://technet.microsoft.com/en-us/security/bulletin/ms12-064

ZDI:
http://archives.neohapsis.com/archives/fulldisclosure/2012-12/0220.html
http://www.zerodayinitiative.com/advisories/ZDI-12-201

Deep Links
Links available to Secunia VIM customers