Heap overflow

Heap-based buffer overflow in the flasksecuritylabel function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users domU to execute arbitrary code via the flaskop hypercall...

CVE-2008-3687

Affected: Xen 3.3 compiled with XSM:FLASK. Vulnerable: flask_security_label function, due to a heap-based buffer overflow. Impact: unprivileged domU users can execute arbitrary code via the flask_op hypercall. Public exploit details are not provided in the documents; no patch/version remediation ...

CVE-2008-3687: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the flasksecuritylabel function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users domU to execute arbitrary code via the flaskop hypercall...