There is a new zero-day attack in progress against Yahoo Messenger users. The instant messaging solicitation invites users to open their Webcam.
However, the code used in this China-based exploit causes a heap overflow to be triggered when the target accepts a Webcam invitation. That means a remote attacker could execute malicious code on a compromised machine.The McAfee security blog recommends the following: do not accept Webcam invites from untrusted sources until a patch is released, and block outgoing traffic on TCP port 5100 on your firewall until a patch is released.
Yahoo has been informed and said it is working on a patch.
This article first appeared as a blog posting on News.com.
Play video
i canot talk with my friends and canot see and the page not the same
Posted by amgad ali on Saturday, August 18 2007 05:57 AM