YIM Exploit

I wasn't quite sure where to throw this, but this is a yim exploit that was posted yesterday.

http://lists.netsys.com/pipermail/fu...er/014434.html

That's good to know about. Thanks for that.

-Zen

Thanks for posting this, freealans. I haven't been paying attention to bugtraq like I usually do as of late because I've been really busy, but this is actually a program that I use, so I thank you. :)

Thanks a lot. Have you tried exploiting yourself just to test, or if you would like help, please contact me.

AIM: Wix 555 Lesser Evil
MSN: [email protected]

I will make a Yahoo account when it is needed if you would like.

-Cheers-

looks like this requires the user to go to a malicious web-site.

Yeah, it does. It requires them to go there and an ActiveX control is run that overflows the dll file. You can't just IM someone and make it work, hehe.

Wow, thanks. I've been using YIM for a while.

I really appreciate the heads up :), will delete the file ASAP. YIM is so much better than AIM or MSN :).

i dint know but i was told that yahoo auto-updates and this vuln only affects ver 5.6.0.1347 and below

I thought you had a website or website or would make one :)

Pretty cool though.

-Cheers-