> This is very similar to the AIM overflow recently discovered. > ICQ protocol uses the same TLV (2711) packet and there is a similar > weakness in the parsing of the packet. duh, that's because its essentially the same protocol. :) ICQ clients should probably be viewed with the same suspicion as the vulnerable AIM clients. elijah