Excel Document Delivers Formbook Malware By Exploiting CVE-2017-11882

Copying null-terminated data into a local buffer without a proper length detection causes a stack buffer overflow that leads to arbitrary code execution. The affected local buffer is only 2CH bytes long relative to the function return address.