Buffer overflow on WordPerfect format parsing.
vulners.com/securityvulns/securityvulns:doc:6803
vulners.com/securityvulns/securityvulns:doc:6829