Yahoo and AOL Instant Messenger services exploited

c|net's News Blog is reporting that non-vendor disclosed vulnerabilities are targeting the Instant Messenger services of Yahoo! and AOL. There are no fixes from either vendor yet. The complete details are available from ZDNet blogger Ryan Naraine.