The Register has reported that there were new vulnerabilities on both Yahoo and AOL’s instant messengers.

The AOL vulnerability can only be exploited if the user accepts arbitrary messages or if the hacker is already on his friends list.

However, the Yahoo flaw is more vulnerable since the code was already disclosed on a mailing list. The code may run on the user’s machine but it depends on his or her security settings in Internet Explorer.

The article notes that this is the fifth time in less than three months that Yahoo Messenger has been reported that it has a critical security vulnerability. It is the ninth zero-day threat this year for this instant messenger.

Source: The Register