Security Flaw Found in Trillian IM

[stevey]

CNet news is reporting today that a potentially serious security flaw has been found in the Trillian instant messaging client.

Trillian is an instant messaging (IM) software which allows users to interact with people using many different IM services, such as AOL Instant Messenger and MSN Messenger, using just one instant messaging client (Trillian) instead of having to run each instant messenger software for each service separately.

A large number of people use Trillian, and not surprisingly, as it has been estimated that at least 25% of home users instant message with people on at least two different IM networks at the same time.

The security hole discovered in Trillian will allow a malicious hacker to shut down programs running on the target machine, and even to take control of the entire computer.

Trillian’s CEO, Scott Werndorfer, played the flaw down as being “extremely low risk", stating that the hacker would need to create a fake instant messaging software, then send a message to the Trillian user, and then have the user accept the message