Yahoo! Messenger Yverinfo.dll Activex Control Buffer Overflow

[TCH-Thomas]

From: Secunia http://secunia.com/advisories/26579/

Rating: Highly critical

 

Description:

A vulnerability has been reported in Yahoo! Messenger, which can be exploited by malicious people to compromise a user's system.

 

The vulnerability is caused due to a boundary error within the YVerInfo.dll ActiveX control and can be exploited to cause a buffer overflow e.g. when a user is tricked into viewing a malicious web page.

 

Successful exploitation may allow execution of arbitrary code.

 

The vulnerability is reported in YVerInfo.dll versions prior to 2007.8.27.1 included in Yahoo! Messenger downloaded before 2007-08-29.

 

Solution:

Update to version 8.1.0.419.

[TCH-Bruce]

Thanks for the info Thomas

[TCH-Don]

Thanks Thomas