Vietnamese Security Engineer Was Awarded by Yahoo for Discovering a Serious Vulnerability on Yahoo

This article examines Vietnamese Security Engineer Was Awarded by Yahoo for Discovering a Serious. It presents the main facts, practical implications, and key points in a clearer, easier-to-follow format.

Understanding Vietnamese Security Engineer Was Awarded by Yahoo for Discovering a

The vulnerability was discovered quite seriously in the imageMagick image processing software related to Yahoo Messenger. Taking advantage of this vulnerability, hackers will send a maliciously formatted image file to the Yahoo Messenger system causing a memory leak of the Yahoo server. The preview image (thumbnail) will be returned and displayed in Yahoo Mesenger chat frame.

Based on this return, an attacker can collect and aggregate data on Yahoo Messenger servers and may include user data on a global scale.

All Yahoo Messenger users with tens of millions of numbers will be affected by this serious vulnerability. As of May 21, there have been over 50 million downloads of this application.

New Yahoo Messenger version.

After discovering this serious flaw, on March 13, 2018, Nguyen Van Luc informed Yahoo through an intermediary unit. After the exchange, the Yahoo company confirmed the existence of this vulnerability and identified Mr. Luc as the first to provide Yahoo. On April 12, Yahoo awarded the engineer Nguyen Van Luc about this discovery, the prize value is kept confidential.

• Thousands of Apple ID accounts are leaked because an application's server has data leaks.
• Facebook awards 1 billion VND for those who find new data holes.