Security firm eEye says it has notified Yahoo of multiple security vulnerabilities within its instant messaging application, which could lead to "remote execution of arbitrary code with minimal user interaction." The flaws were given a severity rating of "high."

Although eEye has withheld specific details of the vulnerabilities and says no exploit code has surfaced, the company notes that both Yahoo! Messenger 8.0 and 8.1 running on Windows are affected. Yahoo says it is working on a fix for the problems, which follow an April security update related to audio conferencing.