Yahoo! Messenger! in! security! flap!
Print storyIts buffer floweth over
Posted in Enterprise Security, 18th December 2006 14:57 GMT
VMware whitepaper - The business case for Virtualization
Yahoo! Messenger users have been warned to update their IM software following the discovery of a serious security bug.
The vulnerability - which involves an unspecified buffer overflow bug in the IM client's YMailAttach ActiveX control - creates a potential means for hackers to take control of Windows (and only Windows) PCs.
Users running Yahoo! Messenger clients released before 2 November are advised to update to the latest version of the software via the Yahoo! download site here. Unless they apply the update, users of Yahoo! Messenger 5,6,7 and are all at risk from attack in cases where they are tricked into visiting maliciously constructed websites that take advantage of the vulnerability.
Both Yahoo! (here) and US CERT (here) have published advisories explaining the problem in greater depth. US CERT lists a number of workarounds, such as disabling the affected ActiveX control in IE, designed to guard against attack for those not yet ready to upgrade. ®
The Business Case for Virtualization
HP and VMware take the cost and complexity out of IT
Distribute the workload for greater efficiency and power
Rethink virtualization in business terms
Implementing energy efficient data centers
Scareware mongers hitch free ride on Microsoft.com and others
Home Office death list 'stops ID fraud'
Boffin brings 'write once, run anywhere' to Cisco hijacks
Electronic votes mysteriously vanish in Ohio election