| Mobile| RSS

Yahoo Messenger vulnerabilities

Wednesday, July 18, 2007 | posted in | 3 comments

A pair of serious vulnerabilities have been reported in the Yahoo messenger.

In the first vulnerability, a remote attacker could compromise a machine running a webcam on Yahoo messenger by causing a buffer overflow in its ActiveX component when the user visits a webpage with malcious HTML code. The result is that more data is sent to the RAM than it can handle, causing the program or other services running on the computer to crtash, or the execution of harmful code. The second exploit causes a buffer overflow in the file ywcvwr.dll, which is used in the viewer component of the messenger.

Solution

Yahoo has released a patch for the exploits, stating that everyone using their messenger should download the updated version from
http://messenger.yahoo.com/download.php.

3 Responses So far
gravatar
Sharib Naqvi
on July 20, 2007 at 2:59 AM  

Hi I have added a link of your blog on my blog.

Kindly do the same for me

The Tech Center
http://www.the-tech-center.blogspot.com

gravatar
ADRIAN
on July 21, 2007 at 6:02 AM  

SIGN-UP HERE, AN GET A FREE IPOD http://www.customorderthis.com?ref=27629

gravatar
Aaron
on July 21, 2007 at 7:24 AM  

Thanks for the tip. I just downloaded the patch for it - although, I'm not a big webcam person. Also, I just voted for your blog for the Blogger's Choice Awards (http://www.bloggerschoiceawards.com/blogs/show/21742). There a spot on the there where you can post a brag badge where your readers can click and vote for you as well.
Thanks for all the great feeds -

Post a Comment

Twitter