New Hole Spotted in AOL Instant Messenger
A company named Core Security Technologies says a security hole has been found in several versions of AOL's instant messenger program.
A company named Core Security Technologies says a security hole has been found in several versions of AOL's instant messenger program.
The problem, Core Security contends, is that AIM was enabling full access to all of Internet Explorer's functions, including its ability to carry out programming commands and direct a computer to Web sites. So by embedding certain commands in an IM session, an attacker could direct a victim's computer to do lots of regrettable things, such as visiting a malicious Web site where even more bad code would be installed.
