CVE:CVE-2008-4915
CNNVD:CNNVD-200811-153
VMWare是一款虚拟PC软件，允许在一台机器上同时运行两个或多个Windows、DOS、LINUX系统。
VMWare在处理指令的执行时存在问题，攻击者可能利用此漏洞提升自己的权限。如果在设置了Trap Flag的情况下出现中断，正确的CPU将执行转移到中断处理器之前会清除Trap Flag。对于受影响的VMware版本，如果内核态IRET设置了Trap Flag的话，则在执行单字节INT 3指令的时候Trap Flag在模式切换后仍继续存在，这造成的结果就是如果能够导致内核通过IRET设置Trap Flag的话，用户态代码在遇到INT 3断点(#BP)处理器的第一个指令的话会导致出现单步调试trap(#DB)。
solution:Upgrade vmware ace to a higher version than 1.0.7,2.0.5,and avoid the version [1.0,1.0.7],[2.0,2.0.5]; Upgrade vmware esx to a higher version than 3.5,and avoid the version [2.5.4,3.5]; Upgrade vmware esxi to a higher version than 3.5,and avoid the version 3.5; Upgrade vmware player to a higher version than 1.0.8,2.0.5,and avoid the version [1.0.0,1.0.8],[2.0,2.0.5]; Upgrade vmware server to a higher version than 1.0.7,and avoid the version [1.0,1.0.7]; Upgrade vmware workstation to a higher version than 5.5.8,6.0.5,and avoid the version [5.5,5.5.8],[6.0,6.0.5]