critical10.0Public exploit code
CVE-2004-1301
Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code via a crafted Excel (XLS) file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- XLReader 0.9 - Remote Client-Side Buffer Overflow2004-12-16 · remote · multiple · Verified
Impact
Buffer overflow in the book_format_sql function in format.c for xlreader 0.9.0 allows remote attackers to execute arbitrary code via a crafted Excel (XLS) file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xlreader | Xlreader | Version 0.9 |