Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am coding an anonymous WCF service that allows others to post XML into it.

Does using different kinds of XML parsers XDocument, XMLDocument, or even 3rd party parsers increase the attack surface area? (Buffer overflows, etc).

share|improve this question
    
Related: XML Encryption Vulnerability –  makerofthings7 Oct 23 '11 at 17:14

1 Answer 1

up vote 3 down vote accepted

Yes. By definition, allowing user interaction with additional software increases the Attack surface.

share|improve this answer
    
Exactly. The more things, the more things that can be broken. –  Matthew Read Jan 23 '11 at 0:26

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.