AOL AIM Worm Not Fixed

[mandy]

There’s a nasty worm hole in America Online’s standalone AIM (instant messaging) software that won’t be patched until the middle of October.

AOL claims that the vulnerability, which allows a remote attacker to launch executable code without any user action, has been patched in the latest beta client but, as I’ve confirmed in a test with security researcher Aviv Raff, fully patched versions of the beta is still wide open to a nasty worm attack.

Production copies of the software, which sits on tens of millions of desktops around the world, are also unpatched...

full article: http://blogs.zdnet.com/security/?p=542

[regic]

I thought AOL itself was a worm :twistedevil:

[BellisimaJ.]

[quote author=regic link=topic=16532.msg65220#msg65220 date=1191013094]
I thought AOL itself was a worm :twistedevil:
[/quote]

It is!