CVE:CVE-2009-3707
CNNVD:CNNVD-200910-249
VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0.1 build 227600之前的7.0版本和6.5.4 build 246459之前的6.5.x版本，VMware Player 3.0.1 build 227600之前的3.0版本和2.5.4 build 246459之前的2.5.x版本，VMware ACE 2.6.1 build 227600之前的2.6版本和2.5.4 build 246459之前的2.5.x版本，以及VMware Server 2.x版本的授权服务中vmware-authd.exe中的VMware Authentication Daemon 1.0版本中存在格式化字符串漏洞。远程攻击者可借助与”格式化字符串DoS“相关的USER和PASS指令，造成拒绝服务(进程崩溃)。
solution:Upgrade vmware ace to a higher version than 2.5.0,2.5.1,2.5.2,2.5.3,2.5.4,2.6,2.6.1,and avoid the version 2.5.0,2.5.1,2.5.2,2.5.3,2.5.4,2.6,2.6.1; Upgrade vmware player to a higher version than 2.5,2.5.1,2.5.2,2.5.3,2.5.4,3.0,3.0.1,and avoid the version 2.5,2.5.1,2.5.2,2.5.3,2.5.4,3.0,3.0.1; Upgrade vmware server to a higher version than 2.0.0,2.0.1,2.0.2,and avoid the version 2.0.0,2.0.1,2.0.2; Upgrade vmware workstation to a higher version than 6.5.0,6.5.1,6.5.2,6.5.3,6.5.4,7.0,7.0.1,and avoid the version 6.5.0,6.5.1,6.5.2,6.5.3,6.5.4,7.0,7.0.1