Screaming Penguin - Source Does Matter

The SETI@home clients prior to 3.08 have a buffer overflow vulnerability (whats new) that could allow an attacker to take over a client machine ONLY IF that attacker could somehow also get the client to connect to a FAKE SERVER. This has been incorrectly reported on a few other sites as a big hole that would allow any attacker to perform the exploit, but not so unless they can redirect the client first. At any rate, get the latest client and check out the official SETI notes about the issue via the link.   Changes in Version 3.08 of SETI@home