10 Aug 2004
America Online (AOL) has published a workaround for a flaw reported in its Instant Messenger system, AIM.
The flaw, a buffer overflow vulnerability that affects all Windows versions of the software, could allow malicious code to be inserted onto a user machine if the user clicks on a malicious URL in an instant message or a web page.
Further reading
AOL is recommending that Windows users upgrade to a new beta version of its messaging software due to be released later this week.
"This new version of AIM will address the vulnerability and can be obtained via the AIM portal," the company said in a statement.
For users of the existing code, AOL recommends removing the 'HKEY_CLASSES_ROOT\aim' command from the PC system registry.
The flaw was found by security specialist iDefense a month ago; the companies said they have been working together to find a solution.
Latest stories from Security
Related videos
Related articles
Related jobs
Poll
Are you confident that the UK's IT infrastructure is secure from attack in the wake of the Flame malware revelations?
TFL director of Games transport Mark Evers discusses how the public transport network is preparing for this summer's event
Connect with V3.co.uk
The wrong printers, for the wrong tasks on the wrong contracts
Who leads the BI pack and who should we be watching out for?
C# Developer with MS Dynamics A global Bank is currently...
CCNA accredited IT Systems Management Team Leader required...
Oracle Administrator (Oracle Agile PLM DBA) Title...
J2ME Mobile developer required to work in Yorkshire...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?