April 4, 2007 4:55 PM PDT

Yahoo plugs Messenger hole

Related Stories

Yahoo Mail integrates IM

February 12, 2007

Yahoo's IM update: A Trojan horse of surprises

December 15, 2006

Yahoo Messenger releases security update

December 15, 2006

Yahoo this week released an updated version of its instant messaging application to fix a vulnerability in the audio conferencing feature. If exploited, the security hole could give an attacker full control over a Windows computer running the vulnerable software, Yahoo said on its Web site. All versions of Yahoo Messenger downloaded before March 13 are affected, the company said.

For a hack to succeed an attacker would have to trick a Yahoo Messenger user into viewing a malicious Web page, Yahoo said. The flaw lies in an ActiveX control, a small program that can typically be invoked from Internet Explorer. Yahoo will notify its users to install the update over the next several weeks, the company said.

See more CNET content tagged:
audioconferencing, Yahoo! Inc., Yahoo IM, security

1 comments

Join the conversation!
Add your comment (Log in or register)
Yahoo for Mac OS 10
i wonder when yahoo is going to have an active development team for their Macintosh messenger.
it's ridiculous to see them releasing an update every 3 years. i hope MSFT makes the next MSN version so you can communicate with yahoo users.
Posted by wayland.ind (20 comments )
Reply Link Flag
 

Join the conversation

Add your comment

The posting of advertisements, profanity, or personal attacks is prohibited. Click here to review our Terms of Use.

Inside CNET News

1-2 of 12

Scroll Left Scroll Right

RSS Feeds

Add headlines from CNET News to your homepage or feedreader.

Markets

Market news, charts, SEC filings, and more

Related quotes

Yahoo (-0.12%) -0.02 16.12
Dow Jones Industrials (0.57%) 72.81 12,874.04
S&P 500 (0.68%) 9.13 1,351.77
NASDAQ (0.95%) 27.51 2,931.39
CNET TECH (0.84%) 17.13 2,049.14
  Symbol Lookup