Kingsoft Office wpsio Buffer Overflow Exploit

In module wpsio, a BSTR string stored in the file is copied to the stack buffer, without checking its length, leading to a stack buffer overflow.