Security researchers have warned users of the Trillian instant messaging client that the software harbours three critical vulnerabilities that could be used to hijack their Windows PCs.
Trillian's developer, Cerulean Studios, has updated the IM client version to 3.0.10.0 to patch the bugs.
The vulnerabilities were reported by 3Com's TippingPoint , which posted advisories for each. Danish bug tracking firm Secunia, meanwhile, collectively ranked the three as "highly critical" problems, its second-highest threat rating.
The bugs include one within the header parsing code for Microsoft's MSN instant messaging protocol, said TippingPoint's alerts. Another involves how Trillian's talk.dll parses XML data, and a third is within messages sent via America Online's AIM instant messaging network.
http://www.techworld.com/security/news/index.cfm?RSS&NewsID=101578