Vulnerability Spotlight: Multiple vulnerabilities in AT&T Labs’ Xmill utility

guest · Aug 10, 2021

Vulnerability Spotlight: Multiple vulnerabilities in AT&T Labs’ Xmill utility
August 10, 2021
https://blog.talosintelligence.com/2021/08/vuln-spotlight-att.html

Cisco Talos recently discovered multiple vulnerabilities in AT&T Labs’ Xmill utility. An attacker could take advantage of these issues to carry out a variety of malicious actions, including corrupting the application’s memory and gaining the ability to execute remote code.

Xmill and Xdemill are utilities that are purpose-built for XML compression and decompression, respectively. These utilities claim to be roughly two times more efficient at compressing XML than other compression methods. As of publishing, AT&T Labs is no longer supporting this software and, therefore, will not be issuing any patches. The software, released in 1999, can still be found in modern software suites, such as Schneider Electric's EcoStruxure Control Expert.
Click to expand...

Schneider is working to fix issues directly impacting Schneider Electric’s EcoStruxure Control Expert.

Talos tested and confirmed these vulnerabilities affect AT&T Labs Xmill, version 0.7. However, there is no update available, as AT&T is no longer supporting this product.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Multiple vulnerabilities in AT&T Labs’ Xmill utility

guest Guest

Log in or Sign up

Vulnerability Spotlight: Multiple vulnerabilities in AT&T Labs’ Xmill utility

guest Guest

Useful Searches