A security researcher claims to have found a trio of coding bugs in Secunia's popular security inspection tool.

Secunia PSI, which provides a handy way to check if applications installed on a computer are up to date, has a bug in its interface which allows anything to be inserted, according to blogger Raul Romero.

Thomas Kristensen, chief security officer at Secunia, told The Register that Romero had failed to demonstrate any vulnerability with its technology.

"Based on the vague information he has posted there is no proof of a security issue," Kristensen said.

"However, assuming that one can insert images and scripts as part of the profile, then it would only be a bug and not a security issue because the user only can do this to himself."

He added that Secunia takes any claims about security issues in its technology seriously.

All three bugs - all of which appear to be small beer - are yet to be confirmed but do illustrate the point that even security applications are prone to coding errors from time to time. ®

Related stories

• Secunia recovers from DNS redirection hack (26 November 2010)
• Patchy Windows patching leaves users insecure (7 March 2010)
• Think software patching is a hassle? You're not alone (5 March 2010)
• MS blames non-Redmond apps for security woes (8 April 2009)
• Windows patching abysmal, and getting worse (3 December 2008)
• Secunia tool helps surfers to keep up to date with patches (26 November 2008)