URGRADE NOW:Critical bug hits Yahoo Messenger!!!

Kiran.dks · 19-12-2006, 08:41 AM

Critical bug hits Yahoo Messenger
IM flaw allows attackers to take control of a system

Yahoo Messenger users are being urged to upgrade to the latest version after the application was hit by a 'highly critical' vulnerability.

The flaw allows for a buffer overflow attack against an ActiveX control bundled with the installer for the application. An attacker could exploit the vulnerability to take control of a system by luring a user to a specially crafted website.

Yahoo said in a security advisory that it is not aware of any attacks exploiting the flaw.

Secunia gave the flaw a severity rating of 'highly critical', the fourth on a five step scale.
The flaw affects Yahoo Messenger versions 2005.1.1.4 and above. An update can be downloaded from Yahoo's website.

UPGRADE NOW: Yahoo! Messenger v 8.1

Courtesy: Click here

s18000rpm · 19-12-2006, 09:28 AM

Thanks yaar.

Third Eye · 19-12-2006, 11:55 AM

Thanks for telling us !

hemant_mathur · 19-12-2006, 03:19 PM

Thanx for the info.

nishant_nms · 20-12-2006, 01:52 AM

thanx man

Ankur Gupta · 20-12-2006, 07:08 AM

yeah i also got an upgrade msg and i did it immediately....
thanx for telling...

eagle_y2j · 20-12-2006, 09:44 AM

thankx for info but i prefer chat clients to chat .
Official messanger is a ****

Kiran.dks · 21-12-2006, 10:01 AM

Welcome guys!

21-12-2006, 11:28 AM

I re-downloaded Yahoo messenger 8.1.209 last night, the same version number, but the application is changed, it now has an option "Notify before installing Yahoo messenger updates"