May 6, 2003 (2:10 p.m. EST)
TechWeb News
Even instant messengers can put you at risk.
Security firm Core Security Technologies has posted an advisory detailing six vulnerabilities in ICQ, the instant messaging client from Mirabilis, a subsidiary of America Online. Two of the flaws could let attackers run malicious code on users' systems.
One of the critical vulnerabilities stems from ICQ's integrated POP3 e-mail client, while the other appears in the program's automatic updating feature. In both cases, an attacker could force the compromised machine to run hostile code.
The flaws affect the ICQ Pro 2003a client.
No fix is currently available. In fact, Core Security reported that numerous attempts to contact Mirabilis' security support over the last two months have gone unanswered.
Source: Tech Web News
http://www.techweb.com/wire/story/TWB20030506S0003
