Tielei Wang has discovered a vulnerability in Yahoo Messenger, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an integer overflow error in the "CYImage::LoadJPG()" method (YImage.dll) when allocating memory using the image dimension values. This can be exploited to cause a heap-based buffer overflow via a specially crafted JPG file.

Successful exploitation may allow execution of arbitrary code, but requires a victim to allow photo sharing with an attacker.

The vulnerability is confirmed in version 11.5.0.152. Other versions may also be affected.

Solution
Update to version 11.5.0.155.

Provided and/or discovered by
Tielei Wang, Georgia Tech Information Security Center via Secunia.

Technical Analysis
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers