Yahoo Messenger - updated ...

FYI…

Yahoo Messenger v11.5.0.152 / 0-Day exploit - 2011.12.02…
- http://www.malwarecity.com/blog/new-yahoo-…pdate-1229.html
2 December 2011 - "… A newly discovered exploit in version 11.x of the Messenger client (including the freshly-released 11.5.0.152-us*) allows a remote attacker to arbitrarily change the status message of virtually any Yahoo Messenger user that runs the vulnerable version…
You are -not- vulnerable if… You have Yahoo Messenger set to 'ignore anyone who is not in your Yahoo! Contacts' (which is off by default)…"

* Yahoo Messenger v11.5.0.152-us:
> http://www.majorgeeks.com/Yahoo_Messenger_d4235.html
Date: 2011-11-30 / Size: 18 MB / License: Freeware

- https://secure.wikimedia.org/wikipedia/en/w…history#Windows
v11.5.0.152 - November 29, 2011
Tabbed IMs / Improved Spam Management / New Social Games / Easy Access to Recent Contacts
Smart Archiving / Snap and Share / Quick Access to All Emoticons…

FYI…

Yahoo Messenger vuln - update available
- https://secunia.com/advisories/47041/
Release Date: 2012-01-13
Criticality level: Moderately critical
Impact: System access
Where: From remote
… may allow execution of arbitrary code, but requires a victim to allow photo sharing with an attacker.
The vulnerability is confirmed in version 11.5.0.152. Other versions may also be affected.
Solution: Update to version 11.5.0.155.

- http://www.securitytracker.com/id/1026523
CVE Reference: CVE-2012-0268
Date: Jan 13 2012
Impact: Execution of arbitrary code via network, User access via network
Version(s): prior to 11.5.0.155…

- http://majorgeeks.com/Yahoo_Messenger_d4235.html
Yahoo! Messenger 11.5.0.155
Date: 2012-01-11
Size: 18.3 MB
License: Freeware