Vulnerability Development: Re: AOL IM 4.7 d0s 0-Day

[Matthew Sachs <matthewg () zevils com>]

I just saw this with my custom AIM client.  It's an IM consisting of
a repeated sequence of "<!-- " (sans quotes).  I tested it against
WinAIM 4.7.2480 and it does indeed produce the crash you described.

-- 
Matthew Sachs, the original nonstandard deviant
matthewg () zevils com  http://www.zevils.com/
GPG key: 0x600A0342     PGP key: 0x93EA1151