Perl MARC: File: XML module XML external entity processing information leakage Vulnerability

Release date:
Updated on:

Affected Systems:
Perl MARC: File: XML 1.x
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2014-1626

Perl is a high-level, general, literal, and dynamic programming language.

The MARC: File: XML module earlier than version 1.0.2 of Perl has an error in processing XML external entity references, which may cause leakage of some File content.

<* Source: John Lightsey (john@nixnuts.net)

Link: http://secunia.com/advisories/55404/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Perl
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.perl.com

Refer:
Https://metacpan.org/source/GMCHARLT/MARC-XML-1.0.2/Changes