A new vulnerability in Yahoo’s instant messenger program can potentially cause unwanted code to run on a PC, according to security researchers.

Details of the vulnerability were first posted on a Chinese-language security forum and was later confirmed with Yahoo security officials, wrote Wei Wang, a researcher with McAfee’s Avert lab in Beijing, on a company blog. So far, no exploit code has been published, wrote Karthik Raman, also of McAfee.