Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar (.njx) documents.
secunia.com/advisories/18702
secunia.com/secunia_research/2006-5/advisory/
securityreason.com/securityalert/461
securitytracker.com/id?1015649
www.njstar.com/njstar/chinese/
www.njstar.com/njstar/japanese/
www.osvdb.org/23354
www.securityfocus.com/archive/1/425498/100/0/threaded
www.securityfocus.com/bid/16737
www.vupen.com/english/advisories/2006/0670
exchange.xforce.ibmcloud.com/vulnerabilities/24773