Code execution with .RTF or .WRI file embedded object.
vulners.com/securityvulns/securityvulns:doc:14618
vulners.com/securityvulns/securityvulns:doc:14638
vulners.com/securityvulns/securityvulns:doc:14696
vulners.com/securityvulns/securityvulns:doc:14697