tansqrx
Dec 15 2006, 05:09 PM
| | CNET is reporting that a new Yahoo! Messenger Exploit has been found. The story (http://news.com.com/2100-1002_3-6144110.html?part=rss&tag=2547-1_3-0-5&subj=news) states that all versions prior to November 2, 2006 are affected and by downloading the latest version (8.1) you will be protected. The bug was apparently first reported to Secunia (http://secunia.com/advisories/23401/). No details or exploit code has been published.
No my question, which ActiveX control does this affect and does anyone of the juicy detail of this one? Additional links can be found at http://news.zdnet.com/2100-1009_22-6144110.html and http://messenger.yahoo.com/security_update.php?id=120806.
|
Reply
tansqrx
Dec 15 2006, 10:51 PM
A little bit more has come out of this exploit. SecurityFocus has picked up on it at http://www.securityfocus.com/bid/21607/info and US-CERT has a better description at http://www.kb.cert.org/vuls/id/901852.
Reply
Recent Queries:--
download yhoo multi messenger mode - 96.89 hr back. (1)
-
yahoo messenger activex - 272.47 hr back. (1)
Similar Topics
Keywords : yahoo, messenger, unspecified, activex, buffer, overflow
- New Ceo For Yahoo!
(0)
Messenger 9.0.0.234 Released
(4) Yahoo! has released an updated version of Messenger and is now at version 9.0.0.234
(http://www.ymessengerblog.com/blog/2008/11/18/updated-90-addresses-vista-issues/). This is
apparently due to some problems with the previous version working under Microsoft Vista after the
official Vista version was discontinued.....
Yahoo! Messenger Firewall Changes
(0) Yahoo! announced on their official Messenger blog (ymessengerblog.com) that unspecified changes will
be made to the way firewalled users will use Messenger. The article mentions that only users that
are using version 8.x and signed in from behind a firewall will be affected. An official message
will be sent by Yahoo! urging users to upgrade to the latest 9.x version of the software. From a
programming standpoint this will most likely only affect Messenger operations that require a peer to
peer (p2p) connection such as file sharing. When performing a peer to peer oper....
Yahoo! Profiles Updated
(2) Yahoo! has changed their profile system and more has changed besides the layout of the page. When
transitioning to the new system all of the user data was cleared and pages for aliases were removed.
Additionally, personal information such as age and location are now protected in a manner similar
to Facebook or MySpace where you must be accepted by the user. Apparently many users are not happy
with the new system as shown in
(http://www.yprofileblog.com/blog/2008/10/17/managing-your-alias-and-profile/),
(http://www.ymessengerblog.com), and (http://tech.slashdot.org/art....
Yahoo! Messenger Challenge Response Algorithm
(11) Here is a question that came into my forum and I thought it needed wider coverage. Q: Can you
explain the Yahoo! Messenger challenge response algorithm? The Yahoo! Messenger challenge response
sequence is quite complex and unique to Yahoo! The challenge comes from the server and is then run
through an algorithm on the client. When looking at the challenge and response in ASCII view it
almost looks like a mathematical equation but it is not. This complex algorithm came from several
years ago when the username and password was sent in plain text over the network an....
Yahoo! Messenger Power User
(2) I just received a very weird message when I logged into Messenger today. It said “Congratulations,
you are a Power User!” The pop-up was in its separate window similar to the annoying Insider and
had a Learn More, Choose Your Icon, and No Thanks button (the Learn More button didn’t work). After
doing a quick Google search
(http://help.yahoo.com/l/us/yahoo/messenger/messenger9/pwrusr/pwrusr-01.html)
(http://messenger.yahoo.com/powerusers) I found that this thing does really exist and wasn’t some ad
pop-up that somehow got past my defenses. Here are a few of the “benef....
Yahoo! Search Boss
(5) Last wednesday (2008-07-09) Yahoo! Search launched a new service called Yahoo! Search BOSS (Build
your Own Search Service) which is a web services platform that allows developers and companies to
create and launch web-scale search products by utilizing the same infrastructure and technology that
powers Yahoo! Search . Some capabilities of the new Yahoo! Search BOSS service are: Ability to
re-rank and blend results Unlimited queries Total flexibility on presentation This service is
based on Python and is available to everybody, to get started and Build your Ow....
History Of Yahoo
compare.. ;) (2) QUOTE Yahoo! began as a student hobby and evolved into a global brand that has changed the way
people communicate with each other, find and access information and purchase things. The two
founders of Yahoo!, David Filo and Jerry Yang, Ph.D. candidates in Electrical Engineering at
Stanford University, started their guide in a campus trailer in February 1994 as a way to keep track
of their personal interests on the Internet. Before long they were spending more time on their
home-brewed lists of favorite links than on their doctoral dissertations. Eventually, Jerry and ....
Get Paid To Search Yahoo!
New way for you to make money online (10) Hi buddies, Is this a good news for you? I've got paid for the first month from this site. Here
is how you can earn: After you sign up, they ask you to set their page as homepage and install a
search box.Everyday, when you search once, you will earn up to 3p. How much you can earn depends on
where you live. I earned 1.5p per search. So, if you search 40 times per day, how much you will earn
a month? It's very easy, right? In addition, when you refer friends, you will earn more. They
offer 4 referral levels: 50%, 10%, 5% and 2.5%. If you are interested, sign up a....
Yahoo! Messenger Talking To Google Talk?
(7) While Yahoo! was off fighting Microsoft, they made some deals with Google to put a slightly tainted
taste into the merger deal. The most notable one was an ad revenue “trial” where Google would serve
the ads on Yahoo! pages in return for a very favorable share of the profit. Over the past week it
appears that the trials were very successful and Yahoo! has agreed to a more permanent deal with
Google that would continue the deal, pending any anti-trust issues. Mixed up in this agreement is a
paragraph that indicates future interoperability between the two IM platforms (....
Is The Sandbox Only For Google?
Does the sand box affect yahoo, msn? (0) Does the sandbox effect prevent yahoo and msn search engine rankings as well as google rankings?
Because my site was on the first page for it's targeted keyword on msn and yahoo. But now my
site url can't even be found in yahoo. It says that such an url does not exist! Do any of you
know the answer to this? If so share your views.....
Yahoo! Dodges The Bullet
(4) Microsoft has receded it’s bid for Yahoo! in a surprise Saturday (May 3, 2008) announcement. When
presented with offering more money or engaging in a hostel take-over, Microsoft decided to take a
third route and just drop the whole thing. In a letter addressed to Yahoo!
(http://www.microsoft.com/presspass/press/2008/may08/05-03letter.mspx), Microsoft outlined several
reasons why they let the offer slip. There are concerns that a deal between Yahoo! and Google would
seriously throw a monkey wrench into things and regulatory bodies, the EU in particular, would frown
upo....
Messenger Plus
The MSN extension. (4) Messenger Plus 4 You Messenger Plus is a "Windows Live Messenger" Extension pack...You can do
all sorts of things if you download it, You can download scripts that let you do incredible things
on msn..Such as Nudge more then once and much much more, The download link is above, So download it
now!, But remember that this is a Windows Live Messenger Extension pack, No other Messenger is
supported.....
It Still Looks Like Microsoft Messenger May Still Happen
(9) Over the past week the talks of Microsoft buying Yahoo! has not diminished. Recently Slahsdot
(http://tech.slashdot.org/article.pl?no_d2=1&sid=08/04/07/236215) published a note that points to
both a Microsoft press release
(http://www.microsoft.com/Presspass/press/2008/apr08/04-05LetterPR.mspx) and the Yahoo! reply
(http://yhoo.client.shareholder.com/press/releasedetail.cfm?ReleaseID=303369). The bottom line is
that Yahoo! hasn’t said no, they just want more money. In my mind the simple fact that Microsoft
has not backed down after the initial offer means they will se....
Live Messenger Display Pic Problem
(5) I'm having a problem with my display picture on Live Messenger. Everytime I log off and then
log back on, it changes back to one I don't use anymore (what's in my avatar). What I
normally have is this (LOL) but it changes back to the LOL one all the time. It's really
annoying. It also does it to my brother, he has some funny gnome on it and it changes back to that
duck that comes with it. So does anyone know why it does it and how to fix it? ....
Vb.net And Windows Live Messenger Plugin
(3) HI, I am currently developing a media player for a friend. I amusing VB.Net and just making him a
quick program. He asked whether it was possible to link it with the messenger live music plugin
(like the one used in WMP). I said i'll get back to him on that. What i would like to know is
where to start? I have found a dll in the Live Messenger directory that can is called
'psmsong.8.1.0178.00.dll' and has a description of 'MSN Messenger Status Plugin' How
can i implement this into the program. I have a way of passing current details (artist, album, so....
Do Google Search Better Than Yahoo?
This is a question for you all google users!! (15) Do you think google search is better than yahoo?? Are they have similar search?? Well for me google
search is more effective than yahoo search engine.....
Yahoo! Messenger 9 Beta Preliminary Review
(15) I have been using the latest version of Yahoo! Messenger for over two weeks now and I would like to
give a quick review of it. Overall this is not a major change from what I know as Messenger. As it
has been said before, this is evolutionary not revolutionary. From what I can see there are no new
features (at least none that I would use), the user interface (UI) is prettier, and it looks like
there have been some bug fixes; that’s it. Under the hood there are some things to note. The
current version of the YSMG protocol with version 8 is 15 and Messenger 9 has bee....
Windows Live Messenger
(11) Hello, I have been using Windows Live Messenger for a couple of months now (I don't think older
version ca be used anymore, and for some reason I couldn't anyway, can't remember exactly,
anyway....), and have always on a daily basis (many times a day), having issue with it logging me
out randomly (with no signs of hiccups or issue with my internet connection) or it just plain
exiting on me completely out of nowhere, with no signs or symptoms of it occurring and I don't
know until I actually proceed to hover over a minimized conversation or the task tray ....
Captchas + Yahoo! Chat = No Bots (for Now)
(22) Just in case you haven’t been keeping up with Yahoo! Chat, it looks like a new sheriff is in town
(http://blog.messenger.yahoo.com/blog/2007/08/29/new-entry-process-for-chat-rooms/). Just before
the Labor Day weekend Yahoo! started making users enter a captcha before they could enter a chat
room. This could possibly mean that the chat rooms will be bot free for the time being. My first
impression of the system was not that bad. I logged in with Yahelite and was quickly prompted to
enter the captcha in a separate dialogue box. I do have to admit that the process did ....
New Windows Live Messenger 8.5 Beta!
For Vista and XP users only (13) hey, i would just like to tell you guys that the new and LEGAL copy of Windows Live Messenger 8.5
beta is now available from Microsoft at http://ideas.live.com The new slick theme is made to
'blend in' to Windows Vista's Glass effects throughout the Operating System. I have
downloaded it and It does match Windows Vista perfectly. I reccommend everyone to download WLM 8.5
beta if you got XP or especially Windows Vista /smile.gif" style="vertical-align:middle" emoid=":)"
border="0" alt="smile.gif" />....
Web-based Gtalk Messenger Finally Arrives
WOW - that was FAST (22) WOWW - Google is FAST. Guys - IT'S ALIVE - it's already been implemented.. I just logged
into one of my accounts and found the messenger right below the Folders list. Here's a
screenshot: Looks terrific - am just waiting excitedly for someone to log on and test it's
features /wink.gif' border='0' style='vertical-align:middle' alt='wink.gif' /> Looks like an
exact replica of GTalk. You can pop the chat dialog out as a separate window or simply keep it
floating inside your Gmail page. Awesome. Here are the pop-in and pop-out mode screen-shots....
Finding Yahoo Account Creation Date
is there a legal way of doing so? (1) As the topic title says, is there a way to find the date someone created a yahoo account, without
crossing the hacking boundary?....
Yahoo! Messenger Protocol Tutorial - Part 2
(2) Part 2 - History The need for humans to communicate faster and more efficiently has been one of the
driving forces behind the Internet. Not since the invention of the telephone has communications
between humans been more readily available. The communication power of the Internet began to take
shape in its infancy with one of the first Internet applications, email. While the Internet was
still ARPANET and with only four links, the first email message was sent by Ray Tomlinson in 1971.
The first message consisted of the text “Testing 1-2-3” and did not contain any of th....
AOL Instant Messenger Chain Virus
Has anyone else been hit by this? (12) yesterday, i was chatting with a friend and she sent me a link to what looked like a photo file...
when i opened it, it turned out to be a virus... which in turn, automatically messaged all the
people online on my buddy list the link and then closed all chat windows..... does anyone know what
this is? and if so, how do i fix it?....
Mercury Messenger
previously called dMSN (8) Ok, I want to present you Mercury Messenger. It's a great chat program wich supports MSN, Jabber
and Gmail Talk! (or at least the service). It's made in Java and is very customisable (especialy
since 1709B03a). There are a few downsides to it (like large memory demands and Sygate PF wich hangs
when Mercury is running), but it's a good one, I think it's even better than MSN. It has
almost everything MSN has, except than sending custom winks (is being worked on) and the sounds
sending feature. It has lost of custom emoticons, skins, listviews, ... on merxtr....
Gmail With Msn Messenger: Is It Legal ?
Not sure if it is legal (9) I am not sure if this is the right place to post this, but here it goes... I saw lately that a lot
of ppl use their gmail accounts for msn messenger, however I read the policy of gmail and what I
understood was that it is not legal to use other clients, such as msn and all. So my question is
this: is it legal to use gmail accounts for msn messenger? And if there are limitations, what are
those?....
Get Rid Of Stupid Flash/activex-warning
IE Users only :-) (4) Finally found a way to get rid of the stupid ActiveX-warning when ActiveX-plugins (Flash) are
disabled in Internet Explorer! Those who need it, know what I'm talking about. Let me say one
thing first: I HATE Flash, I really do. Well and I LIKE Internet Explorer, I want to use Internet
Explorer and I want to use it without Flash. This little workaround is for people who want to use
Internet Explorer without Flash, and not for happy Firefox users with their nice flashblocker,
alright. In Internet Explorer, when you disable ActiveX-Plugins, you get an extremely annoyi....
Have You Ever Been To Yagoohoogle?
Google & Yahoo together... (15) Hello! while browsing the net, I found this interesting project. Its a searchengine that uses code
from google search and yahoo search. You eneter a keyword and it gives you results in yahoo and
google in one splited screen. It's pretty interesting if you constantly check your page rank and
you must compare results between 2 powerful search engines like yagoo! and google. Anyway there are
many software solutions that you can buy, and they have more specific stuff than just comparing
results, but hey, this one is free... Ok, now enough talking HERE is the link to ww....
Msn Messenger Stuff
Very freaky (16) I had a very bad experience with my friend... She was so bored that she decided to download some
software that tells her if i closed her messeges... I didn't get caught though... It was rather
my other friend on the phone with me who told me about it... She asked him about the homework of the
day, then he closed the window... The very next moment, she asked him "Why did you close my window?"
It was really freaky to be watched like that... Can someone tell me how it works?....
Looking for yahoo, messenger, unspecified, activex, buffer, overflow
|
*SIMILAR VIDEOS*
Searching Video's for yahoo, messenger, unspecified, activex, buffer, overflow
|
advertisement
|
|
