URGRADE NOW:Critical bug hits Yahoo Messenger!!!

[Kiran.dks]

Critical bug hits Yahoo Messenger
IM flaw allows attackers to take control of a system

Yahoo Messenger users are being urged to upgrade to the latest version after the application was hit by a 'highly critical' vulnerability.

The flaw allows for a buffer overflow attack against an ActiveX control bundled with the installer for the application. An attacker could exploit the vulnerability to take control of a system by luring a user to a specially crafted website.

Yahoo said in a security advisory that it is not aware of any attacks exploiting the flaw.

Secunia gave the flaw a severity rating of 'highly critical', the fourth on a five step scale.
The flaw affects Yahoo Messenger versions 2005.1.1.4 and above. An update can be downloaded from Yahoo's website.

UPGRADE NOW: Yahoo! Messenger v 8.1

Courtesy: Click here

 

[s18000rpm]

Thanks yaar.

 

[Third Eye]

Thanks for telling us !

 

[hemant_mathur]

Thanx for the info.

 

[nishant_nms]

thanx man

 

[Ankur Gupta]

yeah i also got an upgrade msg and i did it immediately....
thanx for telling...

 

[eagle_y2j]

thankx for info but i prefer chat clients to chat .
Official messanger is a ****

 

[Kiran.dks]

Welcome guys!

 

[gxsaurav]

I re-downloaded Yahoo messenger 8.1.209 last night, the same version number, but the application is changed, it now has an option "Notify before installing Yahoo messenger updates"

 

[rajivrocks]

thnx for the info but yahoo mssngr is losin its relevance to community sites like orkut...........