gaim remotely exploitable vulnerabilities in MSN component

Sebastian Krahmer discovered several remotely exploitable
buffer overflow vulnerabilities in the MSN component of
gaim.

In two places in the MSN protocol plugins (object.c and
slp.c), strncpy was used incorrectly; the size of the array
was not checked before copying to it. Both bugs affect MSN’s
MSNSLP protocol, which is peer-to-peer, so this could
potentially be easy to exploit.