xlreader version 0.9.0 is susceptible to a buffer overflow condition in the book_format_sql() function.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35436/xlreader.txt
Source: https://packetstormsecurity.com/files/35436/xlreader.txt.html