Yahoo! has issued a security alert concerning a problem in its Messenger software that needs to be patched. Yahoo! also recommends that those using its software released prior to November 2, 2006 on a Windows-based PC needs to be fixed immediately to prevent the flaw from being exploited by the bad guys. If you are a Yahoo! Messenger person, I’d do this ASAP.

Yahoo! explains the flaw:

Yahoo! recently identified a security issue, commonly referred to as a buffer overflow in an ActiveX control. This control is part of the Yahoo! services suite typically downloaded with the installer for Yahoo! Messenger.

The Yahoo! Messenger software should prompt you to update the software.

The full security alert from Yahoo! is available here.

Tags: yahoo, messenger, security alert, update, flaw, windows, pc