Arbitrary Code Execution

xen is vulnerable to arbitrary code execution. Lack of adequate sanity-checking of data received via the "net socket listen" option. A malicious local administrator of a guest domain could trigger this flaw to potentially execute arbitrary code outside of the domain...