Secunia

A vulnerability has been identified in the WordPerfect converter included in Microsoft Office, which allows malicious documents to execute arbitrary code on a user's system.

The problem is that certain parameters aren't verified properly before the converter processes the document. This allows malicious documents to cause a buffer overflow, which potentially could lead to execution of arbitrary code.

This may be exploited automatically in Internet Explorer by a malicious website because Internet Explorer automatically lanches the helper application which is installed by Microsoft Office.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Yuji "The Ninja" Ukai
eEye Digital Security

Changelog
Further details available in Customer Area

Original Advisory
http://www.microsoft.com/technet/security/bulletin/MS03-036.asp
http://www.eeye.com/html/Research/Advisories/AD20030903-1.html

Deep Links
Links available in Customer Area