xlreader book_format_sql() Function XLS Document Overflow
Remote / Network Access
Loss of Integrity
A remote overflow exists in xlreader. xlreader fails to properly append strings to an internal array when processing an Excel document resulting in a buffer overflow. With a specially crafted request, an attacker can cause execution resulting in a loss of integrity.
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.