pan
Pavel Polischouk found a boundary error in the PartsBatch class in the
Pan newsreader when processing .nzb files, which could allow remote
attackers to cause a denial of serice (application crash) or possibly
execute arbitrary code via a crafted .nzb file (CVE-2008-2363).
The updated packages have been patched to prevent this issue.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-2363
_______________________________________________________________________