August 17, 2006 2:47 PM PDT

Yahoo fixes Web mail bug

by Joris Evers

Web giant Yahoo has fixed a security flaw in its Yahoo Mail service that exposed user accounts to cyberattacks.

The flaw involves how Yahoo Mail handles attachments and was discovered in early August by Israeli security company Avnet, according to various online news reports. An attacker could hijack a user's account after a malicious attachment was opened, these reports said.

"Online security issues are taken very seriously at Yahoo. We developed a fix for this bug and deployed it last week," a Yahoo representative said Thursday.

Because Yahoo Mail is a hosted service, users don't have to take any action to be protected against potential attacks that exploit the flaw, the representative said. "There were no documented cases of this vulnerability being exploited prior to our fix being released," the representative said.

The flaw could let an attacker craft an HTML attachment to an e-mail and bypass Yahoo Mail's security filter to execute malicious JavaScript code, according to an IDG News Service report Thursday.

Topics:: Security,; Yahoo

Share:: Digg; Del.icio.us; Reddit; Facebook; Twitter

Inside CNET News

Scroll Left Scroll Right

The Download Blog
Google Chrome now bundled with Avast
You wouldn't necessarily expect it, but Avast and Google Chrome might be the next peanut butter-and-jelly combo in the software world.
Gallery
Top-rated reviews of the week (photos)
Software, Interrupted
Brazil looks to ban video games while U.S. makes ratings work
Ratings on video games are working surprisingly well in the U.S. Brazil should avoid costly legislation and adopt a similar system.
Beyond Binary
Windows 7 family pack starting to sell out
Microsoft had said it was a "while supplies last" offer and, sure enough, supplies are starting to run out. It's still available at Amazon, though.
Video
Microsoft's new mapping tricks
Technically Incorrect
Tarantino's cheerily crazy Japanese cell phone ad
The Japanese cell phone company Softbank launches a new TV spot featuring Quentin Tarantino. Tarantino doesn't direct. He acts the role of a samurai uncle. Or something.
Video
A window into the Microsoft Store
Green Tech
'Green' gas and diesel get boost in biofuel grants
Federal government pumps more than $600 million in projects to demonstrate advanced biofuels, including cellulosic ethanol and plant-based replacements for diesel, jet fuel, and gasoline.
Technically Incorrect
Bartender, gimme a beer from outer space
Japanese brewer Sapporo launches a beer it says is made from barley grown on the International Space Station. The 250 winners of a lottery for it will each receive a six-pack.
Gallery
Solar Impulse aircraft flies, briefly (photos)
Crave
@Uh-oh: Twoddler lets toddlers send tweets
A tricked-out Fisher Price Activity Center with pictures of family members and friends attached and an Arduino board inside lets toddlers sent predefined messages to their own Twitter accounts.
30 Days of Innovation
Build muscle, charge your phone with YoGen
Easy Energy will launch the YoGen at CES 2010, a mobile charger that solely relies on hand power. The pocket-size charger lets you generates energy by repeatedly pulling a ripcord.