Multiple integer overflows in Christos Zoulas file before 5.02 allow user-assisted remote attackers to have an unspecified impact via a malformed compound document (aka cdf) file that triggers a buffer overflow.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-3901