The flaws, which were found by eEye Digital Security, allow remote execution of arbitrary code with only minimal user interaction when Yahoo Instant Messenger v8.0 software is loaded.

Commenting on the story, Phil Higgins, a senior partner with Brookcourt Solutions, the value-added systems integrator, said that Instant Messaging (IM) poses a serious security problem for any business PC user.

According to Higgins, as more and more companies embrace corporate governance and compliance issues, as required under the Companies Act 2006, the provisions of which are progressively becoming law, audit logs will be required for all business electronic communications.

For more on the Yahoo Messenger flaws:

http://www.computerworlduk.com/technology/internet/applications/news/index.cfm?newsid=3390

For more on the Companies Act 2006:

http://www.iod.com/is-bin/INTERSHOP.enfinity/eCS/Store/en/-/GBP/IODContentManager-Start;sid=rEKhjxeFcEGb5lHs7CWrGb9FPjLSKUTD1-8=?ChannelID=2&MenuID=14&TemplateName=policy%2fcontent%2fcorp_gov%2fpol_corp_gov_hot_topic_companies_act%2eisml