A vulnerability lies in the Roger Wilco client where it trusts the data length specified in a packet without validation and can allow the program to allocate an insufficiently sized buffer. Versions affected: Graphical server 1.4.1.6 and below, Dedicated server for Win32 0.30a and below and Linux/BSD 0.27 and below.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31619/wilco-recvbof-adv.txt
Source: https://packetstormsecurity.com/files/31619/wilco-recvbof-adv.txt.html