Great Reviews!Need help setting up your website, installing Apache, PHP, MySQL, or PhpNuke?Need help customizing or designing scripts?Please contact me via the Contact Us option for further details and pricing.
DESCRIPTION: A vulnerability has been reported in Yahoo! Messenger, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to a boundary error within the YVerInfo.dll ActiveX control and can be exploited to cause a buffer overflow e.g. when a user is tricked into viewing a malicious web page. Successful exploitation may allow execution of arbitrary code. The vulnerability is reported in YVerInfo.dll versions prior to 2007.8.27.1 included in Yahoo! Messenger downloaded before 2007-08-29.
SOLUTION: Update to version 8.1.0.419. - http://messenger.yahoo.com/download.php
PROVIDED AND/OR DISCOVERED BY: The vendor credits iDefense Labs.
ORIGINAL ADVISORY: http://messenger.yahoo.com/security_update.php?id=082907
Posted on Friday, August 31, 2007 @ 08:56:23 EDT by Raven