Top > Webmaster > 2006 > December > 2006-12-24

Yahoo Releases Important Patch for Messenger Client

Yahoo Messenger is one of the most popular instant messaging applications on the market, and there are millions of people using it around the world. Yahoo has released an important security patch last week that addresses a known vulnerability in its Yahoo Messenger client, and the company highly recommends that users will install the necessary update. Security analysts refer to the flaw in Yahoo`s instant messaging client as "highly critical" and urge users to install it. When applications used by millions are found vulnerable, the risk of a massive online attack carried simultaneously becomes serious.

The flaw exists in Yahoo Messenger`s ActiveX control and could be used by attackers to crash a chat sessions, take down the user`s internet explorer, or in the worst case ? execute malicious code on the victim`s computer. With millions of people using the application this could have a tremendous affect, and users are asked to download the patch when they have some free online time. Yahoo, on the other hand, is not portraying the threat in such an alarming manner, and said that "These impacts could only be possible if an attacker is successful in prompting someone to view malicious HTML code, most likely executed by getting a person to visit their Web page."

In any case, an open patch in an application that is constantly used online is not something that any home user wants. Downloading the patch from Yahoo`s site, or through Yahoo Messenger`s update service is the most recommended action for any PC user.