MS13-044  Vulnerability in Microsoft Visio Could Allow Information Disclosure

2013-05-14 This security update resolves a privately reported vulnerability in Microsoft Office. The vulnerability could allow information disclosure if a user opens a specially crafted Visio file. Note that this vulnerability would not allow an attacker to execute code or to elevate their user rights directly, but it could be used to produce information that could be used to try to further compromise an affected system.
Vulnerabilities addressed in this bulletin:

XML External Entities Resolution Vulnerability

An information disclosure vulnerability exists in the way that Microsoft Visio parses specially crafted XML files containing external entities.
CVE-2013-1301

Bulletin details at Microsoft.com