Vietnamese security engineer was awarded by Yahoo for discovering a serious vulnerability on Yahoo Messenger

Information from Vietnam Network Security Joint Stock Company (VSEC), Nguyen Van Luc, a security engineer of VSEC has discovered a security vulnerability on the new Yahoo Messenger version and was awarded by Yahoo.

The vulnerability was discovered quite seriously in the imageMagick image processing software related to Yahoo Messenger. Taking advantage of this vulnerability, hackers will send a maliciously formatted image file to the Yahoo Messenger system causing a memory leak of the Yahoo server. The preview image (thumbnail) will be returned and displayed in Yahoo Mesenger chat frame.

Based on this return, an attacker can collect and aggregate data on Yahoo Messenger servers and may include user data on a global scale.

All Yahoo Messenger users with tens of millions of numbers will be affected by this serious vulnerability. As of May 21, there have been over 50 million downloads of this application.

New Yahoo Messenger version.

After discovering this serious flaw, on March 13, 2018, Nguyen Van Luc informed Yahoo through an intermediary unit. After the exchange, the Yahoo company confirmed the existence of this vulnerability and identified Mr. Luc as the first to provide Yahoo. On April 12, Yahoo awarded the engineer Nguyen Van Luc about this discovery, the prize value is kept confidential.

See more:

1. Thousands of Apple ID accounts are leaked because an application's server has data leaks
2. Facebook awards 1 billion VND for those who find new data holes