IE bug allows full MSN Messenger hijack
Source: The Register
The recent privacy stuff-up in Messenger "pales in comparison to what can be done if you use MSN Messenger through unpatched IE vulnerabilities," security researchers Tom Gilder and Thor Larholm have discovered.
Among the fun and games one can have with a vulnerable Messenger user are such sports as impersonating the victim and sending spoof messages and spoof e-mail memos to his contacts, and scouring his local drive for interesting files to share around.
In other words, you can do anything with the victim's Messenger client that the owner can do.
A demonstration has been set up here.
