CVE

Id
33804  
CVE No.
CVE-2008-3687  
Status
Candidate  
Description
Heap-based buffer overflow in the flask_security_label function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users (domU) to execute arbitrary code via the flask_op hypercall.  
Phase
Assigned (20080814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368659 33804 CVE-2008-3687 MLIST:[xen-dev] 20080718 [PATCH][XSM][FLASK] Argument handling bugs in XSM:FLASK  View
368660 33804 CVE-2008-3687 URL:http://www.nabble.com/-PATCH--XSM--FLASK--Argument-handling-bugs-in-XSM:FLASK-to18536032.html  View
368661 33804 CVE-2008-3687 MISC:http://invisiblethingslab.com/bh08/part2.pdf  View
368662 33804 CVE-2008-3687 MISC:http://theinvisiblethings.blogspot.com/2008/08/our-xen-0wning-trilogy-highlights.html  View
368663 33804 CVE-2008-3687 CONFIRM:http://xenbits.xensource.com/xen-3.3-testing.hg?rev/fa66b33f975a  View
368664 33804 CVE-2008-3687 BID:30834  View
368665 33804 CVE-2008-3687 URL:http://www.securityfocus.com/bid/30834  View
368666 33804 CVE-2008-3687 VUPEN:ADV-2008-2426  View
368667 33804 CVE-2008-3687 URL:http://www.vupen.com/english/advisories/2008/2426  View
368668 33804 CVE-2008-3687 SECTRACK:1020731  View
368669 33804 CVE-2008-3687 URL:http://www.securitytracker.com/id?1020731  View
368670 33804 CVE-2008-3687 SECUNIA:31561  View
368671 33804 CVE-2008-3687 URL:http://secunia.com/advisories/31561  View
368672 33804 CVE-2008-3687 XF:xen-flasksecuritylabel-bo(44608)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47133 JVNDB-2008-002443 複数の VMware 製品の ActiveX コントロールにおける脆弱性 複数の VMware 製品の ActiveX コントロールには、詳細不明な脆弱性が存在します。 CVE-2008-3691 33804 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002443.html  View