A remote code execution issue exists due to the way Microsoft Word handles specially crafted files, allowing an attacker to execute arbitrary code or cause a denial of service (memory corruption) via crafted RTF data. This issue has been exploited in the wild. An attacker who successfully exploits this issue could run arbitrary code as the current user, potentially taking complete control of the affected system if the current user has administrative rights.