"Exploit code has hit the Internet for the critical flaws in Yahoo
Messenger that could enable a remote hacker to take control of a user’s
system.
Yahoo Inc. was quick out of the gate and released a fix for
the vulnerabilities last Friday, just two days after the flaws were
publicly disclosed. The trouble is that Terrell Karlsten, a spokeswoman
for Yahoo, apparently disclosed too much information about the bugs in
an interview with InformationWeek.
And that information helped lead a hacker, who identifies himself only as "Danny," right to the flawed code. "
Article Link: http://www.darkreading.com/document.asp?doc_id=126185&WT.svl=cmpnews1_3