US-CERT is warning of an exploit being used against Yahoo! Messenger that may allow an attacker to install malware on a a machine.

If you use Yahoo! Messenger, Yahoo! has released an update which should be installed immediately.

US-CERT is also recommending that Yahoo! Messenger users also do the following:

• Disable the ActiveX controls listed in the Yahoo! Webcam ActiveX Controls Security Update.
• Disable ActiveX as described in the Securing Your Web Browser document.

[Publicly Available Exploit for Yahoo! Messenger IM Client ActiveX Control Vulnerabilities]

[tags]yahoo instant messenger, yahoo messenger, yahoo messenger download[/tags]