Secunia

Limin Wang has reported a vulnerability in csv2xml, allowing malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the "get_field_headers()" function, which is used when converting csv files into xml format. This can be exploited to cause a buffer overflow via a specially crafted csv document.

Successful exploitation allows execution of arbitrary code, but requires that a user is tricked into converting a malicious csv document.

The vulnerability has been reported in version 0.5.1. Prior versions may also be affected.

Solution
Update to version 0.5.2 or later.

Provided and/or discovered by
Limin Wang

Changelog
Further details available in Customer Area

Original Advisory
http://tigger.uic.edu/~jlongs2/holes/csv2xml.txt

Deep Links
Links available in Customer Area