Exploit code is out for critical Yahoo Messenger flaws found by eEye Digital Security earlier this week. Both of the flaws, which allow for system hijacking, are boundary errors in two ActiveX controls in Yahoo Messenger's Webcam Upload and Webcam Viewer.
Security researchers say that they expect attacks using the flaws to arrive soon. That makes prompt patching critical. Yahoo has an update available, Version 8.1.0.401, to fix the vulnerability, posted at messenger.yahoo.com. The company provided this statement on the issue:
"The Yahoo Messenger team recently learned of a buffer overflow security issue in an ActiveX control. Upon learning of this issue, we began working towards a resolution and implemented a fix to Yahoo Messenger's software download. We are encouraging all Yahoo Messenger users to download the latest version (8.1.0.401) available at messenger.yahoo.com."
View: The full story
News source: eWeek
Security researchers say that they expect attacks using the flaws to arrive soon. That makes prompt patching critical. Yahoo has an update available, Version 8.1.0.401, to fix the vulnerability, posted at messenger.yahoo.com. The company provided this statement on the issue:
"The Yahoo Messenger team recently learned of a buffer overflow security issue in an ActiveX control. Upon learning of this issue, we began working towards a resolution and implemented a fix to Yahoo Messenger's software download. We are encouraging all Yahoo Messenger users to download the latest version (8.1.0.401) available at messenger.yahoo.com."
View: The full story News source: eWeek
I prefer YahElite myself if I ever use a yahoo chat room.
Best thing to do is just not go into their chat. Their chat is a joke anymore anyway. 50 people can be in a room and 35 are porn/spam bots, 10 are booter bots and the 5 left are usually idiotic guys thinking the bots are real women wanting them to view their cams
Comments / Complaints - Atleast Yahoo! might read some
Yahoo! Messenger Blog
Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!
Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.