My interview in SC Magazine on multiple flaws in Libxls that could result in remote code execution using specially crafted XLS files.