Worm targets Yahoo! mail
Yahoo! on Monday has repaired a vulnerability in its email service that allowed a worm to harvest email addresses from a user accounts and further spread itself.
The JS/Yamanner worm automatically executes when a user opens the message in the Yahoo Mail service.
It uses JavaScript to exploit a flaw that until today was unpatched. Yahoo later on Monday fixed the vulnerability.
"We have taken steps to resolve the issue and protect our users from further attacks of this worm. The solution has been automatically distributed to all Yahoo! Mail customers, and requires no additional action on the part of the user," Yahoo! spokeswoman Kelley Podboy said in an emailed statement.
