Shortly after eEye Digital Security announced that Yahoo Messenger had a series of malicious errors, a security researcher pointed out where the error was and released the exploit code.

Security expert "Danny" said the Yahoo Messenger security flaw stems from the two Web-based ActiveX Control bugs that accompany the application. Hackers can take advantage of these errors to kidnap the user's system

At the same time, this expert also published the full details of the newly discovered security holes this time.

Security firm eEye ranks detected Yahoo Messenger errors this time on extremely dangerous levels. " ActiveX vulnerabilities can be exploited to remotely execute code that is extremely dangerous because users are vulnerable to attack. Hackers only need to inject malicious code on websites and trick users into accessing it. ".

While waiting for the Yahoo patch, the only way to reduce the risk of being hacked is to temporarily disable the Yahoo Messenger error-free ActiveX Control. However, it is necessary to perform the operation on the Registry. This is a difficult task and not everyone can do it.

Yahoo said it is rapidly developing a patch.

Hoang Dung