Exploits exist for Yahoo IM security flaws
210359
Blog: Presence of exploit code puts pressure on Yahoo to fix the security flaws.
640948
Another version of attack code that targets Yahoo Messenger has been published on the Internet, a security researcher warned.
341717
Upgrade averts code catastrophe Yahoo! users are urged to upgrade their instant messaging software following the discovery of a brace of security vulnerabilities - the second set of serious security flaws involving Yahoo! Messenger in as many weeks.â¦
224832
Upgrade or be own3d A vulnerability in MSN Messenger poses a severe risk of compromise for users of older versions of the software who accept untrusted web cam sessions.â¦
22372
Blog: Yahoo IM fixed after temporary problems
737101
Dubbed MyDoom.AH by security firms, this latest variant in the MyDoom family of worms is exploiting the recently publicised vulnerability in Microsoft Internet Explorer&#39;s (IE) IFRAME buffer overflow.
14529
Blog: Feature designed to dial Web page phone numbers is subject to cross-site scripting attack.
130762
New antispam technology standards are on the way that promise to hit spammers where it hurts the most--their wallets. At issue is the ability to authenticate the original source of e-mail messages, a major
325298
Webcam! library! peril! ActiveX controls - so often the source of Internet Explorer flaws - are the font of two newly discovered flaws in Yahoo! Messenger.â¦
62998
(InfoWorld) - Security researchers Monday disclosed critical vulnerabilities in two popular Windows instant messaging clients, Yahoo Messenger and Trillian. The Yahoo Messenger bug, which was posted to the Full Disclosure mailing list Monday by Rajesh Sethumadhavan, is a buffer overflow flaw that can be exploited with a specially crafted address book entry. Messenger immediately crashes when it encounters the malformed entry, Sethumadhavan said, but it may also be susceptible to code execution, meaning an attacker might be able to inject his own malicious code -- a keystroke stealer or a spam bot, for instance -- into a compromised PC. Yahoo Inc. has not posted a patch for the vulnerability; the company did not immediately respond to a request for confirmation and comment. Trillian, a multiservice client, also sports two bad bugs, said other researchers. A trio made up of Nate Mcfeters, Billy "BK" Rios, and Raghav "The Pope" Dube identified two vulnerabilities in Trillian's handling of the AIM URI (uniform resource identifier). According to Mcfeters, Rios, and Dube, the Trillian flaws are similar to the Internet Explorer/Firefox vulnerability that raised a ruckus last week. "The first example shows the dangers of passing unfiltered arguments to programs that have registered URIs (much like the firefoxurl: vulnerability)," the three wrote in their advisory. "The second example shows that even if arguments are sanitized [emphasis in original] by the browser, many programs can be remotely pwnd via registered URIs and poor development practices." US-CERT posted its own warning Monday as well. The bugs have been confirmed in Trillian 3.1.6.0, added Copenhagen-based vulnerability tracker Secunia APS, which pegged the problems as "highly critical," its second most dire rating. The Web site of Trillian developer Cerulean Studios did not offer an indication that a patch for the Trillian flaw would be forthcoming.
59425
Does your email program accept hidden JavaScript commands?
378789
Security researchers have disclosed critical vulnerabilities in two popular Windows instant messaging clients, Yahoo Messenger and Trillian.
339482
Apple Computer Inc. released this week a security patch for its Mac OS X iChat instant messaging client, which contains a flaw that could a hacker could use to takeover a person&#39;s computer.
444532
Ten security flaws found in Firefox browser, Thunderbird e-mail client.
534160
A new variant of the MyDoom worm that exploits an unpatched flaw in Microsoftâs Internet Explorer browser has emerged to threaten small business and home users in particular, security experts warned this week.
23096
Attackers are exploiting an ActiveX bug in Yahoo's Jukebox music player, Symantec says.
378096
Apple Computer last week released a security patch for its Mac OS X iChat instant messaging client, which contains a flaw that hackers could use to takeover a person&#39;s computer.