|
Title: Critical IM bugs hit Yahoo, Trillian - Gregg Keizer, Computerworld Post by: Mark David on July 21, 2007, 10:29:41 AM Critical IM bugs hit Yahoo, Trillian - Gregg Keizer, Computerworld
The Yahoo Messenger bug, which was posted to the Full Disclosure mailing list Monday by Rajesh Sethumadhavan, is a buffer overflow flaw that can be exploited with a specially crafted address book entry. Messenger immediately crashes when it encounters the malformed entry, Sethumadhavan said, but it may also be susceptible to code execution, meaning an attacker might be able to inject his own malicious code -- a keystroke stealer or a spam bot, for instance -- into a compromised PC. Read More.. (http://www.infoworld.com/article/07/07/17/critical-im-big-hits-yahoo_1.html) |