[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Article: Vulnerability In XML Libraries Discovered ... what are thevulne

• From: "Costello, Roger L." <costello@mitre.org>
• To: "'xml-dev@lists.xml.org'" <xml-dev@lists.xml.org>
• Date: Wed, 12 Aug 2009 14:22:03 -0400

Hi Folks,

This article [1] says that:

    Researchers have uncovered numerous vulnerabilities 
    in popular XML libraries from Sun Microsystems, 
    Python and the Apache Software Foundation.

But it doesn't say *what* the vulnerabilities are. 

It says that:

    More details about some of the XML vulnerabilities 
    that were found [will be released] at the Hacker Halted  
    2009 security conference in Miami, Florida, in September.

Do you have information on specifically what the vulnerabilities are?

/Roger

[1] http://www.eweekeurope.co.uk/news/vulnerability-in-xml-libraries-discovered-1554

• Follow-Ups:
  • Re: Article: Vulnerability In XML Libraries Discovered... what are the vulnerabilities?
    • From: Chuck Bearden <cbearden@rice.edu>
  • Re: Article: Vulnerability In XML Libraries Discovered... what are the vulnerabilities?
    • From: Rick Jelliffe <rjelliffe@allette.com.au>