Yahoo Messenger JPG Photo Sharing Integer Overflow Vulnerability

A vulnerability has been identified in Yahoo Messenger, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an integer overflow error in the "CYImage::LoadJPG()" method (YImage.dll) when allocating memory using the image dimension values. This can be exploited to cause a heap-based buffer overflow via a specially crafted JPG file.