Multiple buffer overflows in the (1) AIM (2) MSN (3) RSS and other plug-ins for Trillian 2.0 allow remote web servers to cause a denial of service (application crash) via a long string in an HTTP 1.1 response header.