Posted by Virus Bulletin on Aug 17, 2007
Video chat invites pose vulnerability danger.
A zero-day vulnerability has been reported in the webcam module of Yahoo! Messenger, allowing attackers remote access to systems open to the exploit.
Little detail has yet emerged on the nature of flaw, which was first uncovered after a post detailing how to exploit it was spotted on a Chinese hacker forum and has yet to be covered by a patch.
McAfee, who released early alerts on the problem, has been criticised for advising blog readers to avoid accepting invitations from 'untrusted sources' until the flaw is patched. ESET's Randy Abrams reminded McAfee, and readers of the ESET blog, that untrusted contacts should always be ignored, even when software is thought to be free from vulnerabilities.
Posted on 17 August 2007 by Virus Bulletin
