CVE ID:	CAN-2004-0891
Description:	Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0891 https://bugzilla.fedora.us/show_bug.cgi?id=2188 http://www.gentoo.org/security/en/glsa/glsa-200410-23.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11790 RedHat Security Advisories: RHSA-2004:604 http://www.redhat.com/support/errata/RHSA-2004-604.html https://www.ubuntu.com/usn/usn-8-1/ XForce ISS Database: gaim-file-transfer-dos(17790) https://exchange.xforce.ibmcloud.com/vulnerabilities/17790 XForce ISS Database: gaim-msn-slp-bo(17786) https://exchange.xforce.ibmcloud.com/vulnerabilities/17786 XForce ISS Database: gaim-msn-slp-dos(17787) https://exchange.xforce.ibmcloud.com/vulnerabilities/17787