MS13-025  Vulnerability in Microsoft OneNote Could Allow Information Disclosure

2013-03-12 This security update resolves a privately reported vulnerability in Microsoft OneNote. The vulnerability could allow information disclosure if an attacker convinces a user to open a specially crafted OneNote file.
Vulnerabilities addressed in this bulletin:

Buffer Size Validation Vulnerability

An information disclosure vulnerability exists in the way that Microsoft OneNote allocates memory from parsing a specially crafted OneNote (.ONE) file.
CVE-2013-0086

Bulletin details at Microsoft.com