(MS13-025) Vulnerability in Microsoft OneNote Could Allow Information Disclosure (2816264)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2013-0086

  Advisory Date: MAR 21, 2013

---

  DESCRIPTION

This patch addresses a vulnerability existing in Microsoft OneNote. A remote attacker can abused this vulnerability when they lure users into opening a specially crafted OneNote file thus leading to information disclosure.

  SOLUTION

  PATCH: http://technet.microsoft.com/en-us/security/bulletin/MS13-025

  AFFECTED SOFTWARE AND VERSION

• Microsoft OneNote 2010 Service Pack 1 (32-bit editions)
• Microsoft OneNote 2010 Service Pack 1 (64-bit editions)

Related Vulnerability

• March 2013 - Microsoft Releases 7 Security Advisories