A company named Core Security Technologies says a security hole has been found in several versions of AOL’s instant messenger program.
The problem, Core Security contends, is that AIM was enabling full access to all of Internet Explorer's functions, including its ability to carry out programming commands and direct a computer to Web sites. So by embedding certain commands in an IM session, an attacker could direct a victim's computer to do lots of regrettable things, such as visiting a malicious Web site where even more bad code would be installed.
New Hole Spotted in AOL Instant Messenger 
Linear Mode
