Secunia

Tom Palarz and Kris Kubicki have reported a vulnerability in xlreader, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the "book_format_sql()" function. This can be exploited to cause a buffer overflow by tricking a user into viewing a specially crafted Excel document.

Successful exploitation allows execution of arbitrary code, but requires that the "-s" command line parameter is used.

The vulnerability has been reported in version 0.9.0. Other versions may also be affected.

Solution
Do not view untrusted Excel documents.
Further details available in Customer Area

Provided and/or discovered by
Tom Palarz and Kris Kubicki

Changelog
Further details available in Customer Area

Original Advisory
http://tigger.uic.edu/~jlongs2/holes/xlreader.txt

Deep Links
Links available in Customer Area