Yahoo Messenger patches security flaw, again
374
Yahoo issues patch for a highly critical security flaw just a week after it issued another Yahoo IM security update.
216335
A vulnerability in AOL's instant messenger could allow attacks. Also: A new Bagle variant rumbles across the Net.
676164
(InfoWorld) - MicrosoftÂ on Tuesday fixed a bug in its Windows Live ID registration that let users deceptively register a false e-mail address. The false e-mail address could then be used as an ID for Microsoft's Live Messenger program, which could trick a user into thinking they are chatting with someone who is not whom they appear to be, such as steveballmer@microsoft.nl. Erik Duindam, a Web developer in Leiderdorp, the Netherlands, reported the problem to Microsoft on Monday. Microsoft acknowledged it had fixed the bug but did not have further information on the flaw's impact. It's unclear how long the flaw may have existed or how many accounts with deceptive instant messenger IDs could have been created. Duindam said a fake ID he created was still active on Tuesday morning. If a user attempts to create a Windows Live ID, Microsoft sends a confirmation e-mail to the e-mail address entered by the user. Without confirmation, Microsoft includes a warning with future messages sent by instant message, which appear as: fake@emailaddress (E-mail Address Not Verified). However, accounts created over the weekend with fake e-mail addresses were still active as of Tuesday and carried no such warning. "It's heaven for scammers," Duindam said via instant message on Tuesday. An attacker could use the flaw as part of a social-engineering ploy, where users are tricked into doing something that puts their machine at risk. For example, victims could receive an instant message from someone who appears to have their boss's e-mail address. At that point, victims could be tricked into thinking they are communicating with their boss. The hacker could then send a link to a malicious Word document, for example, that could install a keystroke logging program on a machine. "In one swoop, you can become the boss, or human resources or accounts," wrote Chris Boyd, senior research manager with FaceTime Communications, via instant message. Boyd said if the original spoofed accounts are still active, Microsoft should try to shut them down as soon as possible. But it could be difficult, especially if Microsoft was not aware of the flaw and can't track the spoofed accounts. Â
83412
Third party, fire and theft Security researchers have released a patch designed to protect users against an outstanding Internet Explorer vulnerability in the absence of available security updates from Microsoft.â¦
378096
Apple Computer last week released a security patch for its Mac OS X iChat instant messaging client, which contains a flaw that hackers could use to takeover a person&#39;s computer.
609685
Microsoft today released an out-of-cycle security bulletin and patch for a critical hole in Internet Explorer that is already being widely exploited by attackers.
659322
SEATTLE -- Microsoft Corp. released a critical security patch Wednesday to fix a flaw in its Internet Explorer Web browser that could allow an attacker to run malicious software on another person&#39;s computer.
321788
Microsoft on Tuesday issued a patch for an earlier discovered flaw in Visual Studio 2005, while yet another cumulative patch for Internet Explorer was released, as well as one for a vulnerability within the Windows Media Format.
753912
Microsoft has suspended the beta testing of the next version of its MSN Messenger client because of a potential security problem. Testers discovered a potential security issue in the early version of MSN Messenger
450858
New vulnerabilities include a critical flaw in Internet Explorer and a "major" bug in Firefox.
526721
Microsoft Corp. released four software patches Tuesday to fix security flaws, including one that could allow hackers to take over computers running the company's instant messaging programs.
152107
Rather Dented Users of the popular Trillian instant messaging client need to update their software following the discovery of a serious security bug.â¦
476187
Security firm eEye says it has notified Yahoo of multiple security vulnerabilities within its instant messaging application, which could lead to "remote execution of arbitrary code with minimal user interaction." The flaws were given a severity rating of "high."
86222
In brief Exploit circulating for unpatched vuln
420080
An update to Firefox fixes a number of security flaws in the browser.
726036
Yahoo Messenger Patches Security Hole  If you logged into Yahoo Messenger today and was taken a back by an automatic security download - don't be scared, it's no virus. Yahoo was only patching up a few holes.  Yahoo has posted a security patch for a flaw in its instant messaging software that ...
112205
Software update patches bug in wireless drivers that left systems vulnerable.