source: http://www.securityfocus.com/bid/5079/info

Pirch is subject to a buffer overflow condition. The overrun occurs if a user receives on a maliciously constructed link. It is not confirmed whether the user must first click on the link or not. This issue is the result of inadequate bounds checking on externally supplied data. 

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/21574.zip