Vietnamese security engineer was awarded by Yahoo for discovering a serious vulnerability on Yahoo Messenger

Information from Vietnam Network Security Joint Stock Company (VSEC), Nguyen Van Luc, a security engineer of VSEC has discovered a security vulnerability on the new Yahoo Messenger version and was awarded by Yahoo.

The vulnerability was discovered quite seriously in the imageMagick image processing software related to Yahoo Messenger. Taking advantage of this vulnerability, hackers will send a maliciously formatted image file to the Yahoo Messenger system causing a memory leak of the Yahoo server. The preview image (thumbnail) will be returned and displayed in Yahoo Mesenger chat frame.

Based on this return, an attacker can collect and aggregate data on Yahoo Messenger servers and may include user data on a global scale.

All Yahoo Messenger users with tens of millions of numbers will be affected by this serious vulnerability. As of May 21, there have been over 50 million downloads of this application.

Vietnamese security engineer was awarded by Yahoo for discovering a serious vulnerability on Yahoo Messenger Picture 1
New Yahoo Messenger version.

After discovering this serious flaw, on March 13, 2018, Nguyen Van Luc informed Yahoo through an intermediary unit. After the exchange, the Yahoo company confirmed the existence of this vulnerability and identified Mr. Luc as the first to provide Yahoo. On April 12, Yahoo awarded the engineer Nguyen Van Luc about this discovery, the prize value is kept confidential.

See more:

Thousands of Apple ID accounts are leaked because an application's server has data leaks
Facebook awards 1 billion VND for those who find new data holes

Yahoo Messenger

Samuel Daniel

Update 24 May 2019

You should read it

May be interested

OneDrive is the most used cloud storage service in the enterprise
spiceworks survey of 544 businesses in north america and europe shows that the majority of businesses using onedrive make cloud storage solutions.
Here are 7 Google YouTube apps and their effects
room when you get lost in the youtube world because there are so many different versions with different functions.
Which smartphone is the most durable?
recently, tom's guide site has purchased all the latest, most popular smartphones in the us for durability testing by drop drop method. this smartphone's durability test costs more than $ 18,000.
Accumulated 1,000,000V directly to the device, Nokia 'brick' fired lightning, self-dialed as a ghost
despite being charged up to 1 million volt directly into the machine, firing electricity, but the legendary phone is still not scratching, even comfortable as usual.
Type '@' to insert new recipients anywhere in Gmail
with the 'mention' feature, you can insert anyone's email address anywhere without having to move it to the recipient address bar by entering the @ symbol later. that is the name of that person.
There were 4,035 cyber attacks on Vietnam in the first 5 months of the year
representative of vietnam computer emergency response center (vncert, under the ministry of information and communications) published statistics on the network attack incident in vietnam in 2018.

Vietnamese security engineer was awarded by Yahoo for discovering a serious vulnerability on Yahoo Messenger

You should read it

May be interested

Technology story