Video chat invites pose vulnerability danger.
A zero-day vulnerability has been reported in the webcam module of
Yahoo! Messenger
, allowing attackers remote access to systems open to the exploit.
Little detail has yet emerged on the nature of flaw, which was first uncovered after a post detailing how to exploit it was spotted on a Chinese hacker forum and has yet to be covered by a patch.
McAfee
, who released early alerts on the problem, has been criticised for
advising blog readers
to avoid accepting invitations from ‘untrusted sources’ until the flaw is patched.
ESET
‘s Randy Abrams reminded
McAfee
, and readers of the
ESET
blog
, that untrusted contacts should always be ignored, even when software is thought to be free from vulnerabilities.
Posted on 17 August 2007 by
Virus Bulletin
Leave a Reply