cve-2010-0277-00

Summary MSN malformed SLP message crash
Date 2010-02-18
CVE Number CVE-2010-0277
Discovered By Fabian Yamaguchi
Fixed In Release 2.6.6

Description

Certain malformed SLP messages can trigger a crash because the MSN protocol plugin fails to check that all pieces of the message are set correctly.

Mitigation

Validate input before attempting to handle the message.

Looking to reach us via XMPP? Check out the new PidginChat service!