SHARE
AOL closes AIM attack vector, but risks remain
By Bill Brenner
Excerpt:
“In an interview conducted Tuesday morning, Israeli vulnerability researcher Aviv Raff said he tested the newest version of the popular IM application against AIM vulnerabilities he and researchers at Core Security Technologies warned about last month …
“Until the issue is fully addressed, Raff recommended users follow the AIM workaround Core outlined in its advisory. Core recommended that users running AIM on Microsoft Windows XP SP2 or Windows Server 2003 SP1 implement Microsoft's ‘Internet Explorer Local Machine Zone Lockdown’ recommendations to mitigate risk, and outlined the steps users can take to do so.”
Source: SearchSecurity.com
