I know most people out there use MSN Messenger for their IM, but I am sure some of our viewers are AIM users, so this story is for you:
AOL Time Warner failed to properly fix a security hole in its AOL Instant Messenger application, leaving its users vulnerable to a new way to exploit the same flaw, a security researcher said this weekend.
The current incarnation of the bug could have been just as dangerous as the previous version, publicized in January, allowing malicious AIM users the ability to execute any program on a vulnerable user's computer, said Matt Conover, a hacker with a security research group known as "w00w00."
"This is almost identical to the problem we found originally, and that's saddening," he said. "By using a slightly different method, we are able to get around the filtering they used to protect against the last flaw."
|