All the latest UK technology news, reviews and analysis
|
|
|
06 Aug 2009
Researchers in Finland have uncovered a series of flaws in the eXtensible Markup Language (XML) libraries that could pose a serious security risk.
The team at Codenomicon, working with the Computer Emergency Response Team in Finland (CERT-FI), found a number of flaws in the way open-source programs process XML functions.
The flaws could be exploited by crafting a specially designed XML file, or by sending specific requests to XML engines.
"XML implementations are ubiquitous. They are found in systems and services where one would not expect to find them," said Erka Koivunen, head of CERT-FI. "For us it is crucial that end users and organisations that use the affected libraries upgrade to the new versions."
Sun Microsystems, Apache and Python are all expected to release new versions of their XML libraries to counter the problem in the next 24 hours. The researchers waited until such library upgrades were available before releasing news of the vulnerabilities.
Latest stories from Open Source
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
V3 examines the key strengths and weaknesses of Samsung's latest iPhone killer
Connect with V3.co.uk
Social networking is almost ubiquitous. This white paper examines the benefits and risks and it looks at the different ways companies can reconcile them
The importance of understanding your infrastructure
Contract Systems Administrator, Southampton My...
PHP Web Developer required to join my market-leading...
Java Developer x2, Spring, Hibernate, Swindon, £40K...
As part of a major implementation of a new inventory...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?