For some time it has been known that there was a security flaw in the Ogg Vorbis library that the Second Life viewer uses for decoding some audio data. It isn’t a new problem, as developers have known about the flaw since about 2009 but never gave it much mind as there was no real opportunity to exploit the flaw.
However, yesterday things changed, when Linden Lab’s Oz Linden sent an email out to third-party viewer developers.