Yahoo Messenger update

[Mac_Blue]

I got a little notice telling me "This program will apply a security update to Yahoo messenger." Press install button to update. Anyone else get this update notice today?

Just making sure it's legit and not some spam or something...Never know.

[Ven0m]

According to Yahoo's Blog if you're running the latest build (249) you already have the security update.

I'm not sure what the security update is about though.

[Nessa]

Mac: I got the same message the other day and i went ahead and went through with it. My Yahoo! and computer are perfectly fine still so i'm pretty sure it's legit.

Just thought i'd let you know!

[Dermot]

This update was to patch a flaw found in the audio conferencing Active X

Yahoo! recently identified a security issue, commonly referred to as a buffer overflow in an ActiveX control. This control is part of the Yahoo! Messenger audio conferencing code.

Some impacts of a buffer overflow might include being involuntarily logged out of a Chat and/or Instant Messaging session, the crash of an application such as Internet Explorer, and in some instances, the introduction of executable code. For this specific security issue, these impacts could only be possible if an attacker is successful in prompting someone to view malicious HTML code, most likely executed by getting a person to visit their web page

Full explanation below..

Security Update - Yahoo! Messenger

[Hazumil]

Funny thing is after I applied the update, I cannot keep yahoo messenger out of my startup file. Have tried teatimer, msconfig to change startup programs, several other ideas. I don not want this to start every time I start my computer, because I rarely use it, and I have an older comp with limited resources. Does anyone have an idea that might help me?

[Ven0m]

When Yahoo starts up, go to Yahoo's Preferences, click on General (if it isn't there already), then uncheck "Automatically start Yahoo! Messenger", and that should fix your problem.