libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read MSAT() is not fully initialized before being consumed by ole2 validate sector chain(), which may result in application crashes or potential information disclosure when processing a crafted XLS file