Yahoo! Messenger Unspecified Activex Control Buffer Overflow

[TCH-Thomas]

I´m not sure if Yahoo messenger have a autoupdate function, so if not...

 

From: Secunia (http://secunia.com/advisories/23401/)

 

Criticality: Highly Critical

 

Description:

A vulnerability has been reported in Yahoo! Messenger, which potentially can be exploited by malicious people to compromise a user's system.

 

The vulnerability is caused due to an unspecified error in an ActiveX control and can be exploited to cause a buffer overflow. No further information is currently available.

 

The vulnerability is reported in versions obtained prior to Nov 2, 2006.

 

Solution:

Update to the latest version.

http://messenger.yahoo.com/

[carbonize]

My partners Yahoo! Messenger did an auto update this morning. Funnily enough so did her MSN messenger. I think all Yahoo messengers were forced to update today as it wouldn't let me log in until after the update.

[TCH-Bruce]

Thanks for the info Thomas

[TCH-Don]

Thanks Thomas