Webcam zero-day in Yahoo! Messenger

Posted by   Virus Bulletin on   Aug 17, 2007

Video chat invites pose vulnerability danger.

A zero-day vulnerability has been reported in the webcam module of Yahoo! Messenger, allowing attackers remote access to systems open to the exploit.

Little detail has yet emerged on the nature of flaw, which was first uncovered after a post detailing how to exploit it was spotted on a Chinese hacker forum and has yet to be covered by a patch.

McAfee, who released early alerts on the problem, has been criticised for advising blog readers to avoid accepting invitations from 'untrusted sources' until the flaw is patched. ESET's Randy Abrams reminded McAfee, and readers of the ESET blog, that untrusted contacts should always be ignored, even when software is thought to be free from vulnerabilities.

Posted on 17 August 2007 by Virus Bulletin



Latest posts:

Five reasons to submit a VB2018 paper this weekend

The call for papers for VB2018 closes on 18 March, and while we've already received many great submissions, we still want more! Here are five reasons why you should submit a paper this weekend.

First partners of VB2018 announced

We are excited to announce the first six companies to partner with VB2018.

VB2018: looking for technical and non-technical talks

We like to pick good, solid technical talks for the VB conference programme, but good talks don't have to be technical and we welcome less technical submissions just as much.

Partner with VB2018 for extra visibility among industry peers

Partnering with the VB conference links your company to a successful and well-established event, demonstrates your commitment to moving the industry forward, allows you to meet potential clients, be visible to industry peers and build lasting…

VB2017 paper: The router of all evil

At VB2017 in Madrid, security researcher Himanshu Anand presented a paper on malware that targets routers, looking both at the topic in general and at some individual case studies. Today we publish both the paper (co-written with Chastine Menrige)…