It's probably a variant of the GDI+ GIF processing vulnerability:
http://www.checkpoint.com/defense/ad...i-02-Sepa.html

I'm new to poker, but do any of the sites use 2 factor authentication? Instead of just username/password.