Security Flaw Found in Yahoo Messenger

Dyre Straits · Dec 4, 2003, 04:38 AM

Security researchers are warning of a security hole in Yahoo's Messenger that could allow attackers to run their own code on computers using the instant messaging program.

The buffer overrun vulnerability was discovered by researcher Tri Huynh in a file named "yauto.dll," which is an ActiveX component of Yahoo Messenger software versions up to 5.6.0.1347, according to a security alert released Wednesday by Secunia of Copenhagen, Denmark.

Yahoo did not immediately respond to requests for comment.

The company was notified via e-mail about the hole one month ago, but did not respond, Secunia said.

Paul Roberts, IDG News Service

More here

Source: PC World

highkick · Dec 4, 2003, 07:39 PM

A security update is available on the Yahoo website here. It updates your Yahoo Mesenger to 5.6.0.1355

Dec 4, 2003, 04:38 AM	#1
Dyre Straits HH Old Fuddy Duddy Join Date: May 2002 Location: Georgia, USA Posts: 14,205 Rep Power: 216 System Specs	Security Flaw Found in Yahoo Messenger Security researchers are warning of a security hole in Yahoo's Messenger that could allow attackers to run their own code on computers using the instant messaging program. The buffer overrun vulnerability was discovered by researcher Tri Huynh in a file named "yauto.dll," which is an ActiveX component of Yahoo Messenger software versions up to 5.6.0.1347, according to a security alert released Wednesday by Secunia of Copenhagen, Denmark. Yahoo did not immediately respond to requests for comment. The company was notified via e-mail about the hole one month ago, but did not respond, Secunia said. Paul Roberts, IDG News Service More here Source: PC World

Dec 4, 2003, 07:39 PM	#2
highkick DriverHeaven Junior Member Join Date: Jul 2003 Posts: 74 Rep Power: 0	A security update is available on the Yahoo website here. It updates your Yahoo Mesenger to 5.6.0.1355 __________________ ATI 9600 Pro (Retail BBA)