Security Updates - Yahoo Messenger

Messenger Audio Wizard Update

February 17, 2005

Do I need to update Yahoo! Messenger to the new version?

If you are using a version of Yahoo! Messenger obtained before February 17, 2005 on a Windows PC. Users on the Mac or other devices are not affected.

How do I get the Security Update?

You can download the latest version of Yahoo! Messenger from http://messenger.yahoo.com/download/. Select the typical install option during the install process.

What is the security issue?

Under a very specific set of circumstances, an executable file could be unknowlingly launched in Yahoo! Messenger. As a result, users could be vulnerable to running a malicious program on their computer.

How did Yahoo! learn of this?

Yahoo! has relationships with third-party security organizations and researchers. Yahoo! learned of this issue through a notification from the security firm Secunia.

What is the potential impact?

While a number of conditions must be met before being exposed to the security issues, users can be vulnerable to running malicious code on their computer.

Who is affected?

There are no known exploits that have affected our users.

Why do I have to install the update?

Installing the update helps protect against exploits of this issue that may be developed.

How long will it take?

The update should take no more than a few minutes, although the exact time depends on the speed of your Internet connection.

What if I don't install the update?

Each time you sign in to Yahoo! Messenger, you will be prompted to update. If you choose not to update and you have not updated via this page, the vulnerability will still exist.