Monday, October 15, 2007

Security issue dogs AIM

AOL has patched <A HREF="http://www.infoworld.com/article/07/10/15/Security-issue-dogs-new-AIM-release_1.html?source=rss&url=http://www.infoworld.com/article/07/10/15/Security-issue-dogs-new-AIM-release_1.html">a serious flaw in its instant-messaging software,</A> but more troubles may lie ahead, according to a security researcher familiar with the issue.

The flaw affects how the AIM software uses Internet Explorer's software to render HTML messages. By sending a maliciously encoded HTML message to an AIM user, an attacker could run unauthorized software on a victim's computer or force the IE browser to visit a maliciously encoded Web page.

Although AOL says it knows of no attacks that exploit this problem, security experts like Aviv Raff had warned that the flaw could possibly be used by a self-replicating computer worm attack.

News Timeline



From Our Sponsor