Secunia

Paul Kurczaba has reported a vulnerability in Zone Labs IMsecure, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to a canonicalization error in the Active Link filter, which blocks URLs in IM messages. This can be exploited to bypass the filter by using encoded representations for various characters.

The vulnerability has been reported in IMsecure and IMsecure Pro versions prior to 1.5.

Solution
Update to version 1.5 or later.

Provided and/or discovered by
Paul Kurczaba, Kurczaba Associates.

Changelog
Further details available in Customer Area

Original Advisory
Zone Labs:
http://download.zonelabs.com/bin/free/securityAlert/16.html

Kurczaba Associates:
http://www.kurczaba.com/html/security/0410141.htm

Deep Links
Links available in Customer Area