Home › Forums › Archives › Instant Messaging › Yahoo! Messenger Support › Suspicious security update message
- This topic has 18 replies, 12 voices, and was last updated 22 years, 2 months ago by
mudgal.
-
AuthorPosts
-
August 13, 2004 at 2:50 am #8930
Jeff Hester
KeymasterI had someone contact me about a suspicious-looking “security update” message that popped up when they launched Y! Messenger. With all the phony pop-ups, spyware, viruses and other nuisances plaguing the Internet, they were right to be cautious.
The dialog titlebar read: “Update Available” and the message itself says “There is a security update to Yahoo! Messenger. It should be installed immediately,” with yes/no options.
So I fired up Yahoo! Messenger to check it out, and lo-and-behold I get the same message. A quick check of Task Manager confirms that the process originates with yupdater.exe; a legitmate component of Y! Messenger.
Bottom line? Yes, the dialog box is not well designed, and doesn’t give much information about the update. But it is legitimate, so if you get it, you can upgrade with peace-of-mind.
August 13, 2004 at 3:05 am #74516UnSaKreD
MemberThe upgrade doesnt appear if you are running 1750.
Also on messenger’s security update, there is no update available..
I thought it a bit odd myself, when I was running 1710 and it popped up.
But when it installed, it didnt do anything…
August 13, 2004 at 3:20 am #74512Oreo
MemberI have version 1643 and I received nothing at all. Jeez, I think I need to update my version if nothing else….where have I been during all of these updates??
August 13, 2004 at 3:31 am #74510detn8r
Participant
Sure enough, I recieved the same update notification. For the record, I am running 1671.
August 13, 2004 at 4:52 am #74506Jeff Hester
Keymasterif you ever in doubt about updates and security visit
http://messenger.yahoo.com/messenger/security/August 13, 2004 at 7:20 am #74520EliteNick
MemberDamn, I wouldn’t have trusted that message box either. It is VERY poorly done 😮
I already upgraded so I never got it though 😎
August 13, 2004 at 7:42 am #74511FrutZle
MemberNow for the big question: is there a patch that’ll let me resize the main window again? I only have 6 people on YIM (don’t ask) and the window’s just way too big. I had one for the last version, but it won’t run on this one 🙁
August 13, 2004 at 9:02 am #74515Nissim1982
MemberI’ve got this message too,i got it after I patch yahoo messenger with
menu update 1.5.August 13, 2004 at 12:03 pm #74518Tinkerbellz3211
MemberWHY ME!! LOL WHen I log into my Y!Multi-Gold its asking me each and every time to take the upgrade even when I already have taken it!! Has anyone else using the gold encountered this problem? Thanks ~TB~
August 13, 2004 at 2:50 pm #74513Oreo
MemberOk, here’s something a little bit odd with all of this for me…which, if I hadn’t seen all of this would have freake me out a bit. I installed on the Windows XP Pro PC, that one was OK, but it acted like I installed a new messenger but didn’t take me through the steps. I updated and installed on the Windows ME PC, and it acted at first like the PC couldn’t handle it, then it took me through a complete install acting like I’ve never had Yahoo! Messenger on this PC. This is an odd update.
August 13, 2004 at 5:09 pm #74514shifter
ParticipantQuote:quote:Originally posted by Tinkerbellz3211WHY ME!! LOL WHen I log into my Y!Multi-Gold its asking me each and every time to take the upgrade even when I already have taken it!! Has anyone else using the gold encountered this problem? Thanks ~TB~
You will constantly get this message because Y!M Gold is not updated when you install the security fix. A new version of Y!M Gold will need to be released to solve this problem.
August 13, 2004 at 9:02 pm #74519Tinkerbellz3211
MemberTY Shifter, I sure hope theres an upgrade in the works for Y Gold soon! I love that tool!!! ~TB~
August 14, 2004 at 12:57 am #74517UnSaKreD
MemberWanna know what that patch was for??
Backdrop last week CERT(http://www.us-cert.gov/cas/techalerts/TA04-217A.html) released an advisory Concerning png/gif images.
Which as you know makes up most of the webs graphics.
There is a serious buffer overflow vulnerability which could lead to remote code execution..
This is why you have been getting that Message.
For More Information, Read below… (Courtesy Of Security Pipe Line)
http://www.securitypipeline.comYahoo Posts Security Patch
By TechWeb News
Quote:quote:Yahoo has posted a security patch for a flaw in its instant-messaging software that could make a computer system vulnerable to crashes and attacks while a user surfs the Web.
The patch, which was posted on the company’s site Thursday, plugs a hole in Yahoo’s use of portable network graphics, a bitmapped graphics file format endorsed by the Internet-standards body World Wide Web Consortium.Yahoo learned of the problem through a notice issued last week by the U.S. Computer Emergency Readiness Team. The flaw enables portable network graphics to execute malicious code when an image is loaded into the system.
Its good to know that Yahoo! is starting to get on the ball when it comes to security and their applications…
Finally Bravo, Yahoo!
August 14, 2004 at 2:47 am #74507Jeff Hester
KeymasterYahoo! took a week to implement the patch. Pretty shocking stuff.
August 14, 2004 at 3:56 am #74522Karen512
MemberHelp! I lost the Res_Msgr_Menu patch (Buddy List Menu * Join User In Chat * User List Menu * View Webcam, etc) after I downloaded the security patch. I tried downloading it again from ShiftThis but I couldnt get it to work (cannot dl the res_msgr.dll) even after I downloaded the res_msgr.dll from google. What can I do?
-
AuthorPosts
- You must be logged in to reply to this topic.