Summary MSN malformed SLP message crash
Date 2010-02-18
CVE Number CVE-2010-0277
Discovered By Fabian Yamaguchi
Fixed In Release 2.6.6

Description

Certain malformed SLP messages can trigger a crash because the MSN protocol plugin fails to check that all pieces of the message are set correctly.

Mitigation

Validate input before attempting to handle the message.