CVE-2004-1301: Xlreader

High severity, CVSS 10.0. EPSS: 6.2% chance of exploitation in the next 30 days.

Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code via a crafted Excel (XLS) file.

Affected products

• Xlreader Xlreader: version 0.9 only

Published 2005-01-10. Last modified 2026-06-16.