NULL pointer dereference on corrupted XML/XLS files.
vulners.com/securityvulns/securityvulns:doc:16065
vulners.com/securityvulns/securityvulns:doc:16067