Secunia

Two vulnerabilities have been reported in Yahoo! Messenger, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a user's system.

The vulnerabilities are caused due to input validation errors in ywcvwr.dll and kdu_v32m.dll when processing JPEG 2000 streams sent via the webcam stream. These can be exploited to cause a DoS condition or a heap-based buffer overflow when a user e.g. is tricked into viewing a malicious webcam stream.

Successful exploitation may allow execution of arbitrary code.

The vulnerabilities affects all versions downloaded before August 21, 2007.

Solution
Update to the latest version.
Further details available in Customer Area

Provided and/or discovered by
team509

Changelog
Further details available in Customer Area

Original Advisory
Yahoo!:
http://messenger.yahoo.com/security_update.php?id=082107

https://www.xfocus.net/bbs/index.php?act=ST&f=2&t=64639&page=1#entry321749

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area