CVE-2018-7438

Name of the Vulnerable Software and Affected Versions FreeXL versions prior to 1.0.5

Description A problem has been discovered in FreeXL, where there is a heap-based buffer over-read in the parse unicode string function. This issue affects versions prior to 1.0.5.

Recommendations For versions prior to 1.0.5, update to version 1.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the parse unicode string function until a patch is available.