ie8 fix

Exploits exist for Yahoo IM security flaws

Presence of exploit code puts pressure on Yahoo to fix the security flaws.

by

At least two sets of exploit code have been posted on the Internet for the security flaws in Yahoo Messenger 8 first disclosed on Wednesday by the security vendor eEye on Tuesday. The two exploits were posted on the Full Disclosure mailing list on Wednesday. One set of code shows how to cause buffer overflow in the Webcam ActiveX component. Another causes a buffer overflow in the viewer ywcvwr.dll. Both exploits were written by Danny.

This morning Yahoo released a patch for Yahoo Messenger, however, update is voluntary. Users will be prompted each time the application loads until the update is installed. Given these public exploits all Yahoo Messenger users should update to the latest release as soon as possible.

Don't Miss

CNET Conversations
Driving into the future at VW's Electronics Research Lab
CNET editor at large Brian Cooley goes behind the scenes with Peter Oel, director of Volkswagen Electronics Research Lab, to show you how Silicon Valley is changing the way we drive, from the latest in infotainment systems to new 3D technologies being used for design.
Play Video
ie8 fix
  • Recently Viewed Products
  • My Lists
  • My Software Updates
  • Promo
  • Log In | Join CNET