CVE-2008-3687

Affected: Xen 3.3 compiled with XSM:FLASK. Vulnerable: flask_security_label function, due to a heap-based buffer overflow. Impact: unprivileged domU users can execute arbitrary code via the flask_op hypercall. Public exploit details are not provided in the documents; no patch/version remediation ...