Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally.