CVE-2013-0086: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability."...