CVE-2013-0086: Buffer Overflow
Published Mar 13, 2013
·Updated
Microsoft OneNote 2010 SP1 does not properly determine buffer sizes during memory allocation, which allows remote attackers to obtain sensitive information via a crafted OneNote file, aka "Buffer Size Validation Vulnerability."
Affected Software
2 affected components
Microsoft SharePoint Foundation=2010-sp1
Microsoft SharePoint Server=2010-sp1
Event History
Mar 13, 2013
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-0086?
CVE-2013-0086 is rated as important due to its potential for information disclosure.
2
How do I fix CVE-2013-0086?
To address CVE-2013-0086, users should apply the latest security updates provided by Microsoft.
3
What versions of software are affected by CVE-2013-0086?
CVE-2013-0086 affects Microsoft SharePoint Foundation 2010 SP1 and Microsoft SharePoint Server 2010 SP1.
4
What kind of attack does CVE-2013-0086 enable?
CVE-2013-0086 allows remote attackers to obtain sensitive information through a specially crafted OneNote file.
5
What is the primary issue with CVE-2013-0086?
CVE-2013-0086 involves improper buffer size validation during memory allocation, leading to potential information disclosure.