] We have found that by sending specially crafted packets
] to the client during the authentication process, an
] attacker is able to compromise and execute arbitrary code
] on the machine running PuTTY or PSCP.

CoreLabs: Vulnerability in PuTTY