PuTTY Vulnerabilities – Two Integer Overflows… patch now.
PuTTY
0.57, released yesterday, fixes two security holes which can allow a
malicious SFTP server to execute code of its choice on a PSCP or PSFTP
client connecting to it. It is recommended that everybody upgrade to
0.57 as soon as possible.
You can download it here.
[Dana Epp's ramblings at the Sanctuary]