Buffer overflow in mso.dll LsCreateLine function. Buffer overflow on image formats parsing.
vulners.com/securityvulns/securityvulns:doc:13479
vulners.com/securityvulns/securityvulns:doc:13480
vulners.com/securityvulns/securityvulns:doc:13481
vulners.com/securityvulns/securityvulns:doc:13482
vulners.com/securityvulns/securityvulns:doc:13492