Microsoft OneNote 2010 Buffer Size Validation Vulnerability

Last Update Date: 13 Mar 2013 15:19 Release Date: 13 Mar 2013 3489 Views

RISK: Medium Risk

TYPE: Clients - Productivity Products

An information disclosure vulnerability exists in the way that Microsoft OneNote allocates memory from parsing a specially crafted OneNote (.ONE) file.

Impact

Remote Code Execution

System / Technologies affected

Microsoft OneNote 2010

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/ms13-025

Vulnerability Identifier

CVE-2013-0086

Source

Microsoft