CertiGuide to Security+  9  Chapter 2:  Communication Security (Domain 2.0; 20%)       9  2.3  The Web            9  2.3.3  Instant Messaging                 9  2.3.3.1  Vulnerabilities

Lack of Logging and Audit Trails 1 2.3.3.2  8.3 Naming Conventions

And of course, need I even mention this? There are implementation flaws in just about everything. If a way hasn’t been found yet in your preferred IM client, to allow someone to send you a file to be stored under a pathname of their choosing, to run a command of the attacker’s choosing on your system, or to accomplish some other impolite activity that would generally be regarded as a security threat, just give it time. Monitor your IM vendor’s site for updates, and install them.

Lack of Logging and Audit Trails 1 2.3.3.2  8.3 Naming Conventions