> The temporary solution you provide would only protect you so long as all > the buddies on your list were not compromised. As soon as one buddy is > compromised, then you are vulnerable *through* that buddy. Or am I not > clearly understanding this exploit? Yes, which is why in the original advisory we recommended AIM filter be installed. This will block the attack from anyone. So only allowing your buddies to contact you in addition to installing AIM filter will keep you secure until a new version of AIM comes out.