Heap-based buffer overflow in Windows Journal in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted Journal (.jnt) file aka \Windows Journal Heap Overflow Vulnerability.\