Yahoo Patches Messenger

Written by Benjamin A. Hunter

Wednesday, 29 May 2002

Here's a heads up for everyone - if you've got the Yahoo Messenger, you may or may not know about the security vulnerability within it.  The vulnerability could allow an attacker to delete files on someone's computer, or worse, cripple their computer's security.  The attack comes through a "buffer overflow" which would give them the ability to embed a malicious executable file on their computer.      Good news for those of you that have the Yahoo Messenger though - Yahoo patched their Messenger version 5.0 this past Friday after the security hole was found.  If you haven't been prompted by the software itself to download the "newer version" Yahoo is recommending you go to their Web site and download the latest build which includes the fix for the vulnerability.  The updated version is for all Messenger users.  Mary Osako, a spokesperson for Yahoo stated in an e-mail, "Upon learning of the issue, we responded quickly by making an updated version of Yahoo Messenger available."      The security hole was originally discovered by an IT consulting company in Ho Chi Minh City, Vietnam known as Vice Consulting.  Most instant messaging services are prone to buffer overflow vulnerabilities.  AOL's Instant Messenger is one that's known for these types of flaws.  Microsoft's MSN Messenger issued a warning earlier this month on their Web site, stating the software could have a "similar weakness."

Last Updated ( Wednesday, 29 May 2002 )

 

< Prev		Next >

AntiBlogger