\pFragments RTF stack overflow — CVE-2010-3333

CVE-2010-3333 is a stack-based buffer overflow in Microsoft Word 2002, 2003, and 2007 triggered by a crafted pFragments value in an RTF document. The scanner emits this CVE rule when the control-word numeric argument is at least 256 or when the canonical shape-property form {\sn pFragments}{\sv ...} carries an oversized value; bare pFragments without exploit-sized data is reported separately as related RTF evidence.