- This topic has 11 replies, 10 voices, and was last updated 21 years, 7 months ago by
.
-
Posts
-
Download it now!
http://messenger.yahoo.comI still use Yahoo 5.6
I hate the newer version. I think I may wait and see what the people have to say.
Is it possible to have both version on my computer at once?
That is the same version they have had out for like 3 months now there is no difference I already have that version…
MartinBradley wrote:What’s the differences between the old and new? Is it worth downloading?This is what Yahoo has to say…
What is the security issue? Under a very specific set of circumstances, an executable file could be unknowlingly launched in Yahoo! Messenger. As a result, users could be vulnerable to running a malicious program on their computer.
What is the potential impact of this issue? The user can be vulnerable to attacks by Trojans or other malicious programs on their computer if the following criteria are met:- Messenger is installed by an Administrator
- Administrator chooses a non-standard location (i.e. not c:Program FilesYahoo!…)
- Computer is used by limited-rights users (e.g., in libraries, internet cafes)
- OS is Windows 2000 or XP
- Hacker is able to copy trojan (or other malicious code) named ping.exe into Messenger program directory
- Administrator user runs Audio Setup Wizard, the local ping.exe will be executed, potentially including malicious code.
Have there been any exploits of this issue? There are no known exploits that have affected our users.
How did you learn of this issue? Yahoo! learned of this issue through a notification from the security firm Secunia.
here is direct download link
For 5.6 users, just rename asw.dll… unless you actually use the Audio Setup Wizard for some bizarre reason. You don’t even need to do that, just don’t use the Audio Setup Wizard, period, and you won’t be vulnerable. A malicious user can only compromise you, if you use Audio Setup Wizard.
No credit to Yahoo! for supporting 5.x on its servers and not relasing a patch update, instead they force users to update to 6.x, meaing a whole bunch of 5.x users who h8 6.x will keep 5.x and still be vulnerable… as 6.x was so badly made, 5.x users just don’t want to use 6.x under any circumstances.
My point is, Yahoo! offer patches for 5.x or stop supporting 5.x on your servers. You still have 1358.exe on your download servers for download, so you should be providing patches for those who don’t wish to upgrade to your bloated 6.x versions.
Side note: Microsoft don’t develop Windows 98 anymore, but still release security updates for Windows 98 users.
Long live 5.6
Did you actually GO to the download? They give you a CHOICE…that’s RIGHT a CHOICE, oh that evil Yahoo! actually giving people a choice of having the fully loaded messenger or one that looks surprisingly like 5.x Yeah…I downloaded the less featured one to see what it offers. It has things where you can see avatars…that’s it…NO launchCast or any other tabs. Now that seems like a company who is trying to reach out to customers who don’t want all of the frills.
Oreo wrote:Did you actually GO to the download? They give you a CHOICE…that’s RIGHT a CHOICE, oh that evil Yahoo! actually giving people a choice of having the fully loaded messenger or one that looks surprisingly like 5.x Yeah…I downloaded the less featured one to see what it offers. It has things where you can see avatars…that’s it…NO launchCast or any other tabs. Now that seems like a company who is trying to reach out to customers who don’t want all of the frills.What on earth are you talking about? I’m talking about security patches, you seem to be talking about Yahoo!’s software features, and the alternative version of 6.x Yahoo offer. The alternative version, which has skins disabled by default, and stuff.
You need to read what I type, before you reply… Thanks!
Yahoo messenger team are evil
- You must be logged in to reply to this topic.