Yahoo! Messenger Vuln - Update Available

FYI…

- http://secunia.com/advisories/23401/
Release Date: 2006-12-15
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch
Software: Yahoo! Messenger 5.x, 6.x, 7.x, 8.x
…The vulnerability is reported in versions obtained prior to Nov 2, 2006.
Solution: Update to the latest version.
http://messenger.yahoo.com/ …
Original Advisory: http://messenger.yahoo.com/security_update.php?id=120806
"…If you choose not to update and you have not updated via this page or Chat, the vulnerability will still exist."

FYI…

Latest version - Yahoo! Messenger 8.1.0.209 (w/o Toolbar, etc.)
- http://www.download3k.com/Install-Yahoo-Messenger.html
Download ymsgr8us.exe

FYI…

> http://secunia.com/advisories/24742/
Release Date: 2007-04-04
Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Vendor Patch …

> http://messenger.yahoo.com/security_update.php?id=031207
Security Updates - Yahoo! ActiveX Audio Conferencing Update
Posted 2007-04-02
"Do I need to update Yahoo! Messenger to the new version?
Yes, if you are using a version of the All New Yahoo! Messenger obtained before March 13, 2007 on a Windows PC…"

Yahoo! Messenger v8.1.0.249 - (w/o the Yahoo toolbar)…
> http://www.majorgeeks.com/download.php?det=4235
(click on "Free Downloads From: "Author's Site")
ymsgr8us.exe - 10MB

FYI…

> http://secunia.com/advisories/26579/
Release Date: 2007-08-30
Critical: Highly critical
Impact: DoS, System access
Where: From remote
Solution Status: Vendor Patch

- http://messenger.yahoo.com/security_update.php?id=082907
Yahoo! ActiveX Control Update
August 29, 2007
Do I need to update Yahoo! Messenger to the new version?
> Yes, if you are using a version of Yahoo! Messenger installed before August 29, 2007 on a Windows PC.

> http://www.majorgeeks.com/download.php?det=4235
Yahoo! Messenger 8.1.0.419
Date: 2007-08-29

.