Saturday, September 09, 2006

ICQ Heap Overflow Exploit

Core Security released two ICQ related advisories today. One for ICQ tool bar for IE and another for AOL's ICQ client. Since Core Security states they used a fuzzier to discover these issues I suspect there will be other ICQ vulnerabilities discovered and announced by them in the future.

A vulnerability in AOL’s ICQ Pro 2003b instant messenger client could lead to denial of service attacks and remote compromise of systems running vulnerable versions of the client.

The AOL/Mirabilis ICQ client is a popular Instant Messaging (IM) program that enables users to communicate through instant messaging, chat, e-mail, SMS and wireless-pager messages as well as transferring files and URLs, among other features.

Read more HERE.

0 Comments:

Post a Comment

<< Home