A buffer overflow in the ReadFontTbl() function of rtf2latex2e version 1.0fc2 allows for arbitrary code execution.