A vulnerability has been reported in AOL Instant Messenger (AIM), which potentially can be exploited by malicious users to compromise another user's system.

The vulnerability is caused due to an input validation error when processing file transfers between clients. This can be exploited to place files in arbitrary locations on a target users' system via a specially crafted directory traversal sequence specified as the file name when initiating a file transfer.

Successful exploitation requires that the target user accepts the file transfer request.

The vulnerability reportedly affects versions 5.9 and prior.

Solution
Upgrade to the latest version 6.1.
Further details available in Customer Area

Provided and/or discovered by
Discovered by an anonymous person and reported via iDefense Labs.

Original Advisory
iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=508

Deep Links
Links available in Customer Area