The Secure Channel (SChannel) library on Microsoft Windows XP SP1 and SP2 is vulnerable to an off-by-one heap buffer overwrite.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57160/schannel-offbyone.txt
Source: https://packetstormsecurity.com/files/57160/schannel-offbyone.txt.html