Security Updates - Yahoo Messenger

Messenger PNG Update

August 12, 2004

Do I need to update Yahoo! Messenger to the new version?

Yes, if you are using a version of Yahoo! Messenger obtained before March 13, 2007 on a Windows PC.

How do I get the Security Update?

You can download the latest version of Yahoo! Messenger from http://messenger.yahoo.com/download/. Select the typical install option during the install process.

What is the security issue?

There is a security flaw in a widely used third party component also utilized by Yahoo! Messenger.

How did Yahoo! learn of this?

Yahoo! has relationships with third-party security organizations and researchers. Yahoo! learned of this issue through a notice issued by the United States Computer Emergency Readiness Team.

What is the potential impact?

Users may be vulnerable to crashes and attacks when surfing unknown sites on the Internet. A more technical explanation is located on the United States Computer Emergency Readiness Team web site.

Who is affected?

There are no known exploits.

Why do I have to install the update?

Installing the update helps protect against exploits of this issue that may be developed.

How long will it take?

The update should take no more than a few minutes, although the exact time depends on the speed of your Internet connection.

What if I don't install the update?

Each time you sign in to Yahoo! Messenger, you will be prompted to update. If you choose not to update and you have not updated via this page, the vulnerability will still exist.