Microsoft · Office Onenote · CVE-2013-0086
**Name of the Vulnerable Software and Affected Versions**
Microsoft OneNote 2010 SP1
**Description**
An information disclosure issue exists due to improper buffer size determination during memory allocation when parsing specially crafted OneNote (.ONE) files. This allows remote attackers to obtain sensitive information.
**Recommendations**
For Microsoft OneNote 2010 SP1, consider avoiding the use of specially crafted OneNote files until a patch is available. As a temporary workaround, restrict access to sensitive information that could be disclosed through this issue.