CVE-2004-1666

CVE-2004-1666 describes a buffer overflow in the MSN module of Trillian 0.74i. A long string ending in a newline, processed by the MSN component, can be exploited by a remote MSN server to execute arbitrary code on a vulnerable client. The vulnerability is triggered via the MSN protocol handling ...