A vulnerability discovered in Microsoft Office 2007 could be exploited by a malicious user to execute arbitrary code on a compromised PC, security experts have warned.