Code injection

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution...