The real story, such as it is, appears to be that someone made an MS Word macro which can load and execute malicious code from other files such as a jpeg, supposedly to make automated detection of it less likely.