Older ICQ software vulnerable to attack
Source: Yahoo DailyNews
People chatting with outdated ICQ software are at risk for a potentially damaging buffer overflow exploit, AOL Time Warner cautioned in an alert posted Monday. The buffer overflow vulnerability affects versions of America Online's popular ICQ instant messaging software prior to version 2001b, which was released October. Only versions for Microsoft's Windows operating system are vulnerable.
AOL posted a page urging people who haven't already downloaded the latest version of ICQ software to do so. "We are encouraging people to upgrade," AOL representative Andrew Weinstein said. "And we are taking additional server-side precautions. But we do not believe this vulnerability has ever been exploited." AOL learned of the vulnerability, which lies in the application's Voice Video & Games feature, after an alert was posted to the Bugtraq security mailing list....
