‘Highly critical’ Yahoo IM hole
p2pnet.net News:- Yahoo says it’s fixed a “highly critical” vulnerability in its Windows instant messaging client.
Detected by Secunia, the security hole was caused by a flawed Yahoo Messenger ActiveX control, “that could be used by attackers to crash a chat session, bring down the Internet Explorer browser, or execute malicious code on a victimized PC.” says TechWeb.
“To our knowledge, there have been no known executable code exploits related to this issue,” says a Yahoo spokesperson.
Secunia says its Software Inspector will allow people to see if their system is vulnerable.
It says affected are:
Yahoo! Messenger 5.x; Yahoo! Messenger 6.x; Yahoo! Messenger 7.x; and, Yahoo! Messenger 8.x.
Uses should update to update to Messenger 8.1, says Yahoo.
If your Net access is blocked by government restrictions, try Psiphon from the Citizen Lab at the University of Toronto’s Munk Centre for International Studies. Go here for the official download, here for the p2pnet download, and here for details. And if you’re Chinese and you’re looking for a way to access independent Internet news sources, try Freegate, the DIT program written to help Chinese citizens circumvent web site blocking outside of China. Download it here.
Also See:
TechWeb – Yahoo Fixes Messenger Flaw, December 15, 2006
continues to demand – RIAA MediaSentry controversy, October 23, 2006
p2pnet newsfeeds for your site | | rss feed: http://p2pnet.net/p2p.rss | | Mobile – http://p2pnet.net/index-wml.php
December 18th, 2006 at 8:07 pm
Video:
http://news.com.com/1606-2_3-6144280.html?tag=nl.e703\
Other info …be SURE to READ ‘Comments’ made to these articles!
http://news.com.com/Yahoos+IM+update+A+Trojan+horse+of+surprises/2100-1038_3-6144286.html?tag=st.rc.targ_mb
http://news.com.com/Yahoo+Messenger+releases+security+update/2100-1002_3-6144110.html?tag=fd_nbs_ent&tag=nl.e703
http://answers.yahoo.com/question/index;_ylt=AuR0×8Fnww1b11UollEuT5wjzKIX?qid=20061217092056AA9iQvo
Just copy and paste the URLs to be able to VIEW them….. it that doesn’t work, this IS __*IMPORTANT*__ enough to go through the trouble of manually typing the URLS in. Or copy and paste them into a Word or similar document that you can access them straight from there.
December 18th, 2006 at 8:15 pm
http://answers.yahoo.com/search/search_result;_ylt=Anae8GJwXU9w5LcLVTwKdnUezKIX?p=%22man%22-bot
yup, you’ll have to copy and paste that URL, too.