Firewall Wizards mailing list archives

Re: aol/aol instant messenger


From: James Croall <james () foo org>
Date: Wed, 29 Sep 1999 09:00:13 -0400


AOL Instant Messenger seems pretty safe, for the most part.

Oh really? I remember it was at least one ugly buffer overrun problem 
there and AOL *refuses* to fix it.

Feh, there's at least one ugly buffer overrun problem in most of the
software on my desktop PC :-)

As for the much publicized AIM "buffer overflow," I'm not all that
convinced it's a real buffer overflow. I only looked at the posted
traffic captures briefly, but the data looked perfectly valid to me.
Indeed odd-looking, but the headers and so on looked alright.

- James



Current thread: