$ 0 0 xlreader version 0.9.0 is susceptible to a buffer overflow condition in the book_format_sql() function.