Worm wriggles through Yahoo mail flaw (ZdNet)

By Dawn Kawamoto, CNET News.com
Published on ZDNet News: June 12, 2006, 1:32 PM PT

A new worm that targets Yahoo e-mail users is on the loose, taking advantage of an JavaScript flaw, a security company has warned.

The Yamanner worm targets all versions of Yahoo Web-based mail except the latest beta version, Symantec said in an advisory released Monday.

At the time of the advisory, there was no patch for the vulnerability. But by later on Monday, Yahoo said it had come up with a fix for the flaw, which it said had affected very few of its customers.

(Thanks, Ellen Sleeter)