'Extremely critical' flaws hit Yahoo Messenger

Vikingod · Jun 7, 2007, 02:13 PM

Source: vnunet
___________
Two 'extremely critical' vulnerabilities have been discovered in Yahoo Messenger that could be exploited by malicious users to compromise a system.

The boundary errors have been confirmed in version 8.1.0.249 of the messaging software, but other versions may also be affected.

Both flaws are based around the Yahoo Webcam facilities within the software. The problems occur in the 'ywcupl.dll' file that deals with the Webcam Upload, and the 'ywcvwr.dll' file which handles the Webcam Viewer.

Jun 7, 2007, 02:13 PM	#1
Vikingod Int'l Fish Liaison Join Date: Jul 2004 Location: By the light of lamp I sit and type... Posts: 16,197 Rep Power: 112 System Specs	'Extremely critical' flaws hit Yahoo Messenger Source: vnunet ___________ Two 'extremely critical' vulnerabilities have been discovered in Yahoo Messenger that could be exploited by malicious users to compromise a system. The boundary errors have been confirmed in version 8.1.0.249 of the messaging software, but other versions may also be affected. Both flaws are based around the Yahoo Webcam facilities within the software. The problems occur in the 'ywcupl.dll' file that deals with the Webcam Upload, and the 'ywcvwr.dll' file which handles the Webcam Viewer.