Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am coding an anonymous WCF service that allows others to post XML into it.

Does using different kinds of XML parsers XDocument, XMLDocument, or even 3rd party parsers increase the attack surface area? (Buffer overflows, etc).

share|improve this question
Related: XML Encryption Vulnerability – LamonteCristo Oct 23 '11 at 17:14
up vote 3 down vote accepted

Yes. By definition, allowing user interaction with additional software increases the Attack surface.

share|improve this answer
Exactly. The more things, the more things that can be broken. – Matthew Read Jan 23 '11 at 0:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.