Yahoo IM hit with critical security flaws
222720
Blog: A number of highly critical security flaws have been found in the latest version of Yahoo Messenger, which could allow attackers to gain remote access to users systems.
51466
Yahoo Mail Fixes Security Flaws  Yahoo reportedly fixed two flaws in Yahoo Mail which had the potential to allow a hacker to read a victim's browser cookies and change the appearance of some pages, Yahoo told news services. A Yahoo representative said the flaws were fixed last month by making changes ...
341717
Upgrade averts code catastrophe Yahoo! users are urged to upgrade their instant messaging software following the discovery of a brace of security vulnerabilities - the second set of serious security flaws involving Yahoo! Messenger in as many weeks.â¦
336569
A security issue has been discovered in a common feature included in several Web browsers, including Mozilla, Firefox, Opera, Konqueror and Camino.
139416
NEWS IN BRIEF Code for two exploits in Yahoo Messenger first disclosed earlier this week by security firm eEye appeared on the Full Disclosure mailing list on Thursday.
22372
Blog: Yahoo IM fixed after temporary problems
62998
(InfoWorld) - Security researchers Monday disclosed critical vulnerabilities in two popular Windows instant messaging clients, Yahoo Messenger and Trillian. The Yahoo Messenger bug, which was posted to the Full Disclosure mailing list Monday by Rajesh Sethumadhavan, is a buffer overflow flaw that can be exploited with a specially crafted address book entry. Messenger immediately crashes when it encounters the malformed entry, Sethumadhavan said, but it may also be susceptible to code execution, meaning an attacker might be able to inject his own malicious code -- a keystroke stealer or a spam bot, for instance -- into a compromised PC. Yahoo Inc. has not posted a patch for the vulnerability; the company did not immediately respond to a request for confirmation and comment. Trillian, a multiservice client, also sports two bad bugs, said other researchers. A trio made up of Nate Mcfeters, Billy "BK" Rios, and Raghav "The Pope" Dube identified two vulnerabilities in Trillian's handling of the AIM URI (uniform resource identifier). According to Mcfeters, Rios, and Dube, the Trillian flaws are similar to the Internet Explorer/Firefox vulnerability that raised a ruckus last week. "The first example shows the dangers of passing unfiltered arguments to programs that have registered URIs (much like the firefoxurl: vulnerability)," the three wrote in their advisory. "The second example shows that even if arguments are sanitized [emphasis in original] by the browser, many programs can be remotely pwnd via registered URIs and poor development practices." US-CERT posted its own warning Monday as well. The bugs have been confirmed in Trillian 3.1.6.0, added Copenhagen-based vulnerability tracker Secunia APS, which pegged the problems as "highly critical," its second most dire rating. The Web site of Trillian developer Cerulean Studios did not offer an indication that a patch for the Trillian flaw would be forthcoming.
622159
Microsoft is forcing Messenger users to upgrade in order to patch a security vulnerability.
327980
Security firms have reported three new security flaws in various versions of the Mozilla and Firefox Web browsers and Mozilla's Thunderbird e-mail client.
325298
Webcam! library! peril! ActiveX controls - so often the source of Internet Explorer flaws - are the font of two newly discovered flaws in Yahoo! Messenger.â¦
406752
A researcher has posted exploit code that attackers can use to hijack Windows machines via Yahoo Inc.'s Messenger instant messaging software.
61065
ActiveX strikes again Just one day after nasty security flaws were disclosed in Yahoo's Music Jukebox, miscreants have begun to actively exploit them.â¦
130762
New antispam technology standards are on the way that promise to hit spammers where it hurts the most--their wallets. At issue is the ability to authenticate the original source of e-mail messages, a major
652140
Users of Yahoo Inc.'s Messenger software should patch the program as soon as possible, security vendors said today, because hackers are now using exploits that target the instant messaging application.
127768
Third-party fix plugs a recently discovered browser flaw that's increasingly being exploited in cyberattacks.
120648
Symantec snafu now sorted Faulty signature updates on Wednesday resulted in Symantec's anti-virus packages falsely identifying that Yahoo! mail was contaminated by malware.â¦
174035
A group of Internet security and instant messaging (IM) providers have teamed up to detect and thwart the growing threat of IM and peer-to-peer (P-to-P) viruses and worms, they said Tuesday.