Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
AOL Instant Messenger May Run Java or VBScript
A vulnerability in the current versions of AOL Instant Messenger has been discovered that lets a malicious user launch harmful Java or VBScript code.
Steve Manzuik
January 23, 2001
1 Min Read
ReportedJanuary 24, 2001, byWin2KsecAdvice.
VERSIONS AFFECTED
AOL Instant Messenger
DESCRIPTION
A vulnerability in the currentversions of AOL Instant Messenger has been discovered that lets a malicious userlaunch harmful Java or VBScript code. By exploiting the method in whichInstant Messenger handles imbedded images, an attacker can embed Java orVBScript code to be executed when a user saves the chat conversation.
VENDORRESPONSE
AOL was notified on January 18, 2001, and did notrespond publicly.
CREDIT
Discovered byDon't Know Guilt.
About the Author(s)
You May Also Like
