Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer.
| Software | From | Fixed in |
|---|---|---|
| xensource / xen | 3.0 | 3.0.x |
| xensource / xen | 3.0.2 | 3.0.2.x |
| xensource / xen | 3.0.3 | 3.0.3.x |
| xensource / xen | 3.0.4 | 3.0.4.x |
| xensource / xen | 3.1.2 | 3.1.2.x |