CVE-2011-3185
gtkutils.c in Pidgin before 2.10.0 on Windows allows user-assisted remote attackers to execute arbitrary programs via a file: URL in a message.
Date published : 2011-08-29
http://www.securityfocus.com/bid/49268
http://www.securityfocus.com/archive/1/519391/100/0/threaded